: pid=2284 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 35.168529] audit: type=1131 audit(1768891319.078:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.30.110:22-68.220.241.50:35418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 39.394746] Initializing XFRM netlink socket [ 40.099740] kauditd_printk_skb: 107 callbacks suppressed [ 40.099744] audit: type=1325 audit(1768891324.015:297): table=nat:34 family=2 entries=2 op=nft_register_chain pid=2492 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 40.103737] audit: type=1300 audit(1768891324.015:297): arch=c000003e syscall=46 success=yes exit=520 a0=3 a1=7ffe4fd00cd0 a2=0 a3=0 items=0 ppid=2347 pid=2492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 40.109620] audit: type=1327 audit(1768891324.015:297): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 [ 40.114124] audit: type=1325 audit(1768891324.026:298): table=nat:35 family=2 entries=1 op=nft_register_rule pid=2496 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 40.117217] audit: type=1300 audit(1768891324.026:298): arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc33feb690 a2=0 a3=0 items=0 ppid=2347 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 40.126448] audit: type=1327 audit(1768891324.026:298): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E [ 40.130681] audit: type=1325 audit(1768891324.046:299): table=filter:36 family=2 entries=1 op=nft_register_rule pid=2504 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 40.133966] audit: type=1300 audit(1768891324.046:299): arch=c000003e syscall=46 success=yes exit=300 a0=3 a1=7fff454944e0 a2=0 a3=0 items=0 ppid=2347 pid=2504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 40.139836] audit: type=1327 audit(1768891324.046:299): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D464F5257415244002D6900646F636B657230002D6A00414343455054 [ 40.147647] audit: type=1325 audit(1768891324.063:300): table=filter:37 family=2 entries=1 op=nft_register_rule pid=2510 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:42:05 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:42:05 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d ip-172-31-30-110 login: [ 52.705169] kauditd_printk_skb: 17 callbacks suppressed [ 52.705173] audit: type=1130 audit(1768891336.621:308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 53.086450] audit: type=1131 audit(1768891337.002:309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 54.929640] audit: type=1131 audit(1768891338.845:310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 54.940171] audit: type=1334 audit(1768891338.856:311): prog-id=66 op=UNLOAD [ 58.195549] audit: type=1130 audit(1768891342.110:312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.203004] audit: type=1131 audit(1768891342.110:313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.389366] zram_generator::config[2852]: No configuration found. [ 58.704615] audit: type=1334 audit(1768891342.620:314): prog-id=70 op=LOAD [ 58.705838] audit: type=1334 audit(1768891342.620:315): prog-id=50 op=UNLOAD [ 58.709603] audit: type=1334 audit(1768891342.624:316): prog-id=71 op=LOAD [ 58.711475] audit: type=1334 audit(1768891342.624:317): prog-id=53 op=UNLOAD [ 58.711512] audit: type=1334 audit(1768891342.625:318): prog-id=72 op=LOAD [ 58.711567] audit: type=1334 audit(1768891342.625:319): prog-id=60 op=UNLOAD [ 58.711598] audit: type=1334 audit(1768891342.625:320): prog-id=73 op=LOAD [ 58.711631] audit: type=1334 audit(1768891342.625:321): prog-id=74 op=LOAD [ 68.779527] zram_generator::config[3245]: No configuration found. [ 69.109552] kauditd_printk_skb: 202 callbacks suppressed [ 69.109556] audit: type=1131 audit(1768891353.025:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 69.116552] audit: type=1334 audit(1768891353.032:417): prog-id=120 op=LOAD [ 69.117726] audit: type=1334 audit(1768891353.032:418): prog-id=71 op=UNLOAD [ 69.121012] audit: type=1334 audit(1768891353.032:419): prog-id=121 op=LOAD [ 69.122787] audit: type=1334 audit(1768891353.032:420): prog-id=84 op=UNLOAD [ 69.123932] audit: type=1334 audit(1768891353.032:421): prog-id=122 op=LOAD [ 69.125109] audit: type=1334 audit(1768891353.032:422): prog-id=123 op=LOAD [ 69.126187] audit: type=1334 audit(1768891353.032:423): prog-id=85 op=UNLOAD [ 69.127254] audit: type=1334 audit(1768891353.032:424): prog-id=86 op=UNLOAD [ 69.128329] audit: type=1334 audit(1768891353.034:425): prog-id=124 op=LOAD [ 75.952419] kauditd_printk_skb: 32 callbacks suppressed [ 75.952423] audit: type=1334 audit(1768891359.868:458): prog-id=140 op=LOAD [ 75.954822] audit: type=1334 audit(1768891359.869:459): prog-id=141 op=LOAD [ 75.956143] audit: type=1300 audit(1768891359.869:459): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=3630 pid=3640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 75.962606] audit: type=1327 audit(1768891359.869:459): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643530376637356362653965643662643336616438663037663237 [ 75.968399] audit: type=1334 audit(1768891359.869:460): prog-id=141 op=UNLOAD [ 75.970024] audit: type=1300 audit(1768891359.869:460): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3630 pid=3640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 75.975406] audit: type=1327 audit(1768891359.869:460): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643530376637356362653965643662643336616438663037663237 [ 75.981124] audit: type=1334 audit(1768891359.869:461): prog-id=142 op=LOAD [ 75.982506] audit: type=1300 audit(1768891359.869:461): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=3630 pid=3640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 75.988466] audit: type=1327 audit(1768891359.869:461): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643530376637356362653965643662643336616438663037663237 [ 81.251004] kauditd_printk_skb: 71 callbacks suppressed [ 81.251007] audit: type=1325 audit(1768891365.166:487): table=mangle:54 family=2 entries=1 op=nft_register_chain pid=3815 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 81.256005] audit: type=1325 audit(1768891365.167:488): table=mangle:55 family=10 entries=1 op=nft_register_chain pid=3816 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 81.260022] audit: type=1300 audit(1768891365.167:488): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7324f9b0 a2=0 a3=7ffd7324f99c items=0 ppid=3722 pid=3816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.265596] audit: type=1327 audit(1768891365.167:488): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 81.268433] audit: type=1300 audit(1768891365.166:487): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee8b85dc0 a2=0 a3=7ffee8b85dac items=0 ppid=3722 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.274960] audit: type=1327 audit(1768891365.166:487): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 [ 81.277742] audit: type=1325 audit(1768891365.172:489): table=nat:56 family=2 entries=1 op=nft_register_chain pid=3817 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 81.280433] audit: type=1300 audit(1768891365.172:489): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff57fa1b60 a2=0 a3=7fff57fa1b4c items=0 ppid=3722 pid=3817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 81.285974] audit: type=1327 audit(1768891365.172:489): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 [ 81.288637] audit: type=1325 audit(1768891365.173:490): table=nat:57 family=10 entries=1 op=nft_register_chain pid=3818 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 116.101984] kauditd_printk_skb: 143 callbacks suppressed [ 116.101989] audit: type=1106 audit(1768891400.017:538): pid=2328 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 116.118007] audit: type=1104 audit(1768891400.025:539): pid=2328 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 116.199004] audit: type=1106 audit(1768891400.113:540): pid=2323 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 116.216070] audit: type=1104 audit(1768891400.113:541): pid=2323 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 116.230154] audit: type=1131 audit(1768891400.124:542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.110:22-68.220.241.50:35432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 117.084377] audit: type=1325 audit(1768891401.000:543): table=filter:105 family=2 entries=15 op=nft_register_rule pid=3971 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 117.088574] audit: type=1300 audit(1768891401.000:543): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffde0efb100 a2=0 a3=7ffde0efb0ec items=0 ppid=3722 pid=3971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.098998] audit: type=1327 audit(1768891401.000:543): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 117.105741] audit: type=1325 audit(1768891401.021:544): table=nat:106 family=2 entries=12 op=nft_register_rule pid=3971 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 117.121856] audit: type=1300 audit(1768891401.021:544): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffde0efb100 a2=0 a3=0 items=0 ppid=3722 pid=3971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.838867] kauditd_printk_skb: 19 callbacks suppressed [ 121.838871] audit: type=1325 audit(1768891405.754:551): table=filter:113 family=2 entries=19 op=nft_register_rule pid=3980 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.843205] audit: type=1300 audit(1768891405.754:551): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcac8fce10 a2=0 a3=7ffcac8fcdfc items=0 ppid=3722 pid=3980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.851916] audit: type=1327 audit(1768891405.754:551): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 121.855728] audit: type=1325 audit(1768891405.767:552): table=nat:114 family=2 entries=12 op=nft_register_rule pid=3980 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.860063] audit: type=1300 audit(1768891405.767:552): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcac8fce10 a2=0 a3=0 items=0 ppid=3722 pid=3980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.866692] audit: type=1327 audit(1768891405.767:552): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 122.726117] audit: type=1325 audit(1768891406.641:553): table=filter:115 family=2 entries=21 op=nft_register_rule pid=3982 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 122.730994] audit: type=1300 audit(1768891406.641:553): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff0b6aeaa0 a2=0 a3=7fff0b6aea8c items=0 ppid=3722 pid=3982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.740450] audit: type=1327 audit(1768891406.641:553): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 122.744988] audit: type=1325 audit(1768891406.652:554): table=nat:116 family=2 entries=12 op=nft_register_rule pid=3982 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 127.374426] kauditd_printk_skb: 68 callbacks suppressed [ 127.374431] audit: type=1334 audit(1768891411.290:579): prog-id=171 op=LOAD [ 127.377722] audit: type=1334 audit(1768891411.293:580): prog-id=172 op=LOAD [ 127.378984] audit: type=1300 audit(1768891411.293:580): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130238 a2=98 a3=0 items=0 ppid=3993 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.384249] audit: type=1327 audit(1768891411.293:580): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965303535633862643363376132646166636664616238326562623432 [ 127.389546] audit: type=1334 audit(1768891411.293:581): prog-id=172 op=UNLOAD [ 127.391165] audit: type=1300 audit(1768891411.293:581): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3993 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.397370] audit: type=1327 audit(1768891411.293:581): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965303535633862643363376132646166636664616238326562623432 [ 127.403799] audit: type=1334 audit(1768891411.294:582): prog-id=173 op=LOAD [ 127.405526] audit: type=1300 audit(1768891411.294:582): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000130488 a2=98 a3=0 items=0 ppid=3993 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.411861] audit: type=1327 audit(1768891411.294:582): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965303535633862643363376132646166636664616238326562623432 [ 133.002195] kauditd_printk_skb: 18 callbacks suppressed [ 133.002199] audit: type=1334 audit(1768891416.918:589): prog-id=176 op=LOAD [ 133.004805] audit: type=1300 audit(1768891416.918:589): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=4066 pid=4258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.010218] audit: type=1327 audit(1768891416.918:589): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230343934636163636230356134623936336235646462396236616165 [ 133.016103] audit: type=1334 audit(1768891416.918:590): prog-id=177 op=LOAD [ 133.017929] audit: type=1300 audit(1768891416.918:590): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c00017a218 a2=98 a3=0 items=0 ppid=4066 pid=4258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.023721] audit: type=1327 audit(1768891416.918:590): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230343934636163636230356134623936336235646462396236616165 [ 133.029576] audit: type=1334 audit(1768891416.918:591): prog-id=177 op=UNLOAD [ 133.031002] audit: type=1300 audit(1768891416.918:591): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4066 pid=4258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.038585] audit: type=1327 audit(1768891416.918:591): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230343934636163636230356134623936336235646462396236616165 [ 133.044389] audit: type=1334 audit(1768891416.918:592): prog-id=176 op=UNLOAD [ 143.646632] kauditd_printk_skb: 6 callbacks suppressed [ 143.646635] audit: type=1334 audit(1768891427.562:595): prog-id=179 op=LOAD [ 143.649331] audit: type=1300 audit(1768891427.562:595): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=c000194488 a2=98 a3=0 items=0 ppid=4066 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.655451] audit: type=1327 audit(1768891427.562:595): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336343337303633333330366130303164323230333961363634376466 [ 143.663132] audit: type=1334 audit(1768891427.562:596): prog-id=180 op=LOAD [ 143.665392] audit: type=1300 audit(1768891427.562:596): arch=c000003e syscall=321 success=yes exit=22 a0=5 a1=c000194218 a2=98 a3=0 items=0 ppid=4066 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.672981] audit: type=1327 audit(1768891427.562:596): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336343337303633333330366130303164323230333961363634376466 [ 143.678925] audit: type=1334 audit(1768891427.562:597): prog-id=180 op=UNLOAD [ 143.680455] audit: type=1300 audit(1768891427.562:597): arch=c000003e syscall=3 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4066 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.686336] audit: type=1327 audit(1768891427.562:597): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336343337303633333330366130303164323230333961363634376466 [ 143.692349] audit: type=1334 audit(1768891427.563:598): prog-id=179 op=UNLOAD [ 147.189033] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 147.190583] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 149.737706] kauditd_printk_skb: 5 callbacks suppressed [ 149.737709] audit: type=1334 audit(1768891433.653:600): prog-id=182 op=LOAD [ 149.740178] audit: type=1300 audit(1768891433.653:600): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffda53438b0 a2=98 a3=1fffffffffffffff items=0 ppid=4681 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.746165] audit: type=1327 audit(1768891433.653:600): proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 [ 149.753936] audit: type=1334 audit(1768891433.653:601): prog-id=182 op=UNLOAD [ 149.755509] audit: type=1300 audit(1768891433.653:601): arch=c000003e syscall=3 success=yes exit=0 a0=3 a1=8 a2=7ffda5343880 a3=0 items=0 ppid=4681 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.761975] audit: type=1327 audit(1768891433.653:601): proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 [ 149.767986] audit: type=1334 audit(1768891433.654:602): prog-id=183 op=LOAD [ 149.769152] audit: type=1300 audit(1768891433.654:602): arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffda5343790 a2=94 a3=3 items=0 ppid=4681 pid=4793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.774502] audit: type=1327 audit(1768891433.654:602): proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 [ 149.780993] audit: type=1334 audit(1768891433.654:603): prog-id=183 op=UNLOAD This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:43:55 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:43:55 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d ip-172-31-30-110 login: This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:43:56 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:43:56 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d ip-172-31-30-110 login: This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:43:58 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:43:58 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d ip-172-31-30-110 login: [ 154.806891] kauditd_printk_skb: 429 callbacks suppressed [ 154.806895] audit: type=1325 audit(1768891438.722:753): table=filter:132 family=2 entries=20 op=nft_register_rule pid=5485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.810917] audit: type=1300 audit(1768891438.722:753): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffdf21c4a00 a2=0 a3=7ffdf21c49ec items=0 ppid=3722 pid=5485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.816323] audit: type=1327 audit(1768891438.722:753): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 154.818782] audit: type=1325 audit(1768891438.728:754): table=nat:133 family=2 entries=14 op=nft_register_rule pid=5485 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.821373] audit: type=1300 audit(1768891438.728:754): arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffdf21c4a00 a2=0 a3=0 items=0 ppid=3722 pid=5485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.826526] audit: type=1327 audit(1768891438.728:754): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 154.843874] audit: type=1325 audit(1768891438.759:755): table=filter:134 family=2 entries=20 op=nft_register_rule pid=5487 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.846631] audit: type=1300 audit(1768891438.759:755): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc6f937430 a2=0 a3=7ffc6f93741c items=0 ppid=3722 pid=5487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.852299] audit: type=1327 audit(1768891438.759:755): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 154.855731] audit: type=1325 audit(1768891438.771:756): table=nat:135 family=2 entries=14 op=nft_register_rule pid=5487 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:43:59 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:43:59 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d ip-172-31-30-110 login: This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:44:00 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:44:00 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d ip-172-31-30-110 login: This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:44:01 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d This is ip-172-31-30-110 (Linux x86_64 6.12.66-flatcar) 06:44:01 SSH host key: SHA256:ygU5l3H0GRr1kkFrCaWqsOhEQrzcK0XT5QD8WQ5In8E (ED25519) SSH host key: SHA256:bDhdgNSmEvfsKRZ+6s6QdaDRRvIxLsusn5CYOiwQZ5w (ECDSA) SSH host key: SHA256:sK/Wkpa6k5UXK47uC2Zj2jglHu4g8bKup301tPtMvnA (RSA) eth0: 172.31.30.110 fe80::4f0:38ff:fefd:985d ip-172-31-30-110 login: [ 165.813010] kauditd_printk_skb: 8 callbacks suppressed [ 165.813013] audit: type=1130 audit(1768891449.727:759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.110:22-68.220.241.50:58220 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.299701] audit: type=1101 audit(1768891450.215:760): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 166.306459] audit: type=1103 audit(1768891450.218:761): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 166.313601] audit: type=1006 audit(1768891450.218:762): pid=5524 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 166.316879] audit: type=1300 audit(1768891450.218:762): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd3e88f7f0 a2=3 a3=0 items=0 ppid=1 pid=5524 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.322308] audit: type=1327 audit(1768891450.218:762): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 166.339964] audit: type=1105 audit(1768891450.255:763): pid=5524 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 166.346631] audit: type=1103 audit(1768891450.258:764): pid=5528 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 166.846686] audit: type=1325 audit(1768891450.762:765): table=filter:138 family=2 entries=17 op=nft_register_rule pid=5537 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 166.850654] audit: type=1300 audit(1768891450.762:765): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcf229b050 a2=0 a3=7ffcf229b03c items=0 ppid=3722 pid=5537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.523969] kauditd_printk_skb: 13 callbacks suppressed [ 172.523972] audit: type=1130 audit(1768891456.439:772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.110:22-68.220.241.50:48464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.975400] audit: type=1101 audit(1768891456.891:773): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 172.981091] audit: type=1103 audit(1768891456.892:774): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 172.986270] audit: type=1006 audit(1768891456.892:775): pid=5556 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 172.989336] audit: type=1300 audit(1768891456.892:775): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffca0eb1ee0 a2=3 a3=0 items=0 ppid=1 pid=5556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.995139] audit: type=1327 audit(1768891456.892:775): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 173.002529] audit: type=1105 audit(1768891456.918:776): pid=5556 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 173.008770] audit: type=1103 audit(1768891456.920:777): pid=5560 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 173.303803] audit: type=1106 audit(1768891457.218:778): pid=5556 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 173.310367] audit: type=1104 audit(1768891457.219:779): pid=5556 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 178.389719] kauditd_printk_skb: 1 callbacks suppressed [ 178.389722] audit: type=1130 audit(1768891462.305:781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.110:22-68.220.241.50:48474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.866483] audit: type=1101 audit(1768891462.782:782): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 178.872795] audit: type=1103 audit(1768891462.784:783): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 178.877830] audit: type=1006 audit(1768891462.784:784): pid=5599 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 178.880848] audit: type=1300 audit(1768891462.784:784): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc3975b480 a2=3 a3=0 items=0 ppid=1 pid=5599 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.886581] audit: type=1327 audit(1768891462.784:784): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 178.888729] audit: type=1105 audit(1768891462.803:785): pid=5599 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 178.894612] audit: type=1103 audit(1768891462.806:786): pid=5603 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 179.203896] audit: type=1106 audit(1768891463.119:787): pid=5599 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 179.214621] audit: type=1104 audit(1768891463.119:788): pid=5599 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.071518] kauditd_printk_skb: 23 callbacks suppressed [ 186.071521] audit: type=1130 audit(1768891469.987:808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.110:22-68.220.241.50:52064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 186.585922] audit: type=1101 audit(1768891470.501:809): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.591360] audit: type=1103 audit(1768891470.503:810): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.596763] audit: type=1006 audit(1768891470.503:811): pid=5655 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 186.600050] audit: type=1300 audit(1768891470.503:811): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffe236b6f0 a2=3 a3=0 items=0 ppid=1 pid=5655 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 186.606236] audit: type=1327 audit(1768891470.503:811): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 186.618203] audit: type=1105 audit(1768891470.531:812): pid=5655 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.627501] audit: type=1103 audit(1768891470.543:813): pid=5659 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.980409] audit: type=1106 audit(1768891470.896:814): pid=5655 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 186.987554] audit: type=1104 audit(1768891470.896:815): pid=5655 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 192.064299] kauditd_printk_skb: 1 callbacks suppressed [ 192.064302] audit: type=1130 audit(1768891475.980:817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.110:22-68.220.241.50:51240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.491965] audit: type=1101 audit(1768891476.407:818): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 192.497836] audit: type=1103 audit(1768891476.409:819): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 192.503604] audit: type=1006 audit(1768891476.409:820): pid=5680 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 192.510924] audit: type=1300 audit(1768891476.409:820): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffee10b550 a2=3 a3=0 items=0 ppid=1 pid=5680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.516361] audit: type=1327 audit(1768891476.409:820): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 192.524413] audit: type=1105 audit(1768891476.440:821): pid=5680 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 192.531374] audit: type=1103 audit(1768891476.447:822): pid=5684 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 192.806333] audit: type=1106 audit(1768891476.722:823): pid=5680 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 192.813217] audit: type=1104 audit(1768891476.722:824): pid=5680 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 197.893003] kauditd_printk_skb: 1 callbacks suppressed [ 197.893007] audit: type=1130 audit(1768891481.809:826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.110:22-68.220.241.50:51252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.348974] audit: type=1101 audit(1768891482.265:827): pid=5698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.355606] audit: type=1103 audit(1768891482.265:828): pid=5698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.361237] audit: type=1006 audit(1768891482.265:829): pid=5698 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 198.364102] audit: type=1300 audit(1768891482.265:829): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffdcf702f0 a2=3 a3=0 items=0 ppid=1 pid=5698 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.369677] audit: type=1327 audit(1768891482.265:829): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 198.374040] audit: type=1105 audit(1768891482.289:830): pid=5698 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.381220] audit: type=1103 audit(1768891482.296:831): pid=5702 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.670154] audit: type=1106 audit(1768891482.586:832): pid=5698 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 198.676668] audit: type=1104 audit(1768891482.586:833): pid=5698 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 203.939973] kauditd_printk_skb: 20 callbacks suppressed [ 203.939977] audit: type=1325 audit(1768891487.855:850): table=filter:142 family=2 entries=26 op=nft_register_rule pid=5748 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 203.944550] audit: type=1300 audit(1768891487.855:850): arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffeeaeed840 a2=0 a3=7ffeeaeed82c items=0 ppid=3722 pid=5748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.951299] audit: type=1327 audit(1768891487.855:850): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 203.954622] audit: type=1325 audit(1768891487.863:851): table=nat:143 family=2 entries=20 op=nft_register_rule pid=5748 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 203.957978] audit: type=1300 audit(1768891487.863:851): arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffeeaeed840 a2=0 a3=0 items=0 ppid=3722 pid=5748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.964875] audit: type=1327 audit(1768891487.863:851): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 204.014641] audit: type=1106 audit(1768891487.930:852): pid=5731 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 204.027093] audit: type=1104 audit(1768891487.939:853): pid=5731 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 204.032178] audit: type=1325 audit(1768891487.945:854): table=filter:144 family=2 entries=38 op=nft_register_rule pid=5750 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 204.038927] audit: type=1300 audit(1768891487.945:854): arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffd256b7e70 a2=0 a3=7ffd256b7e5c items=0 ppid=3722 pid=5750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.549829] kauditd_printk_skb: 27 callbacks suppressed [ 209.549833] audit: type=1325 audit(1768891493.465:875): table=filter:146 family=2 entries=26 op=nft_register_rule pid=5811 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 209.554579] audit: type=1300 audit(1768891493.465:875): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd420ce330 a2=0 a3=7ffd420ce31c items=0 ppid=3722 pid=5811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.560434] audit: type=1327 audit(1768891493.465:875): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 209.565697] audit: type=1325 audit(1768891493.481:876): table=nat:147 family=2 entries=104 op=nft_register_chain pid=5811 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 209.568537] audit: type=1300 audit(1768891493.481:876): arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffd420ce330 a2=0 a3=7ffd420ce31c items=0 ppid=3722 pid=5811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.575028] audit: type=1327 audit(1768891493.481:876): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 [ 211.119308] audit: type=1130 audit(1768891495.035:877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.110:22-68.220.241.50:54874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.622848] audit: type=1101 audit(1768891495.538:878): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 211.628774] audit: type=1103 audit(1768891495.538:879): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 211.633952] audit: type=1006 audit(1768891495.538:880): pid=5813 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 217.044436] kauditd_printk_skb: 7 callbacks suppressed [ 217.044439] audit: type=1130 audit(1768891500.960:886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.30.110:22-68.220.241.50:54880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 217.490101] audit: type=1101 audit(1768891501.406:887): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 217.506713] audit: type=1103 audit(1768891501.412:888): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 217.520712] audit: type=1006 audit(1768891501.412:889): pid=5829 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 217.531051] audit: type=1300 audit(1768891501.412:889): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffcf94ad80 a2=3 a3=0 items=0 ppid=1 pid=5829 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 217.550411] audit: type=1327 audit(1768891501.412:889): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 217.571058] audit: type=1105 audit(1768891501.487:890): pid=5829 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 217.582286] audit: type=1103 audit(1768891501.494:891): pid=5833 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 218.288309] audit: type=1106 audit(1768891502.204:892): pid=5829 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 218.308300] audit: type=1104 audit(1768891502.204:893): pid=5829 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 223.363958] kauditd_printk_skb: 1 callbacks suppressed [ 223.363962] audit: type=1130 audit(1768891507.279:895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.110:22-68.220.241.50:55530 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 223.930892] audit: type=1101 audit(1768891507.846:896): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 223.942466] audit: type=1103 audit(1768891507.854:897): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 223.951196] audit: type=1006 audit(1768891507.854:898): pid=5845 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 223.956740] audit: type=1300 audit(1768891507.854:898): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdac1aea80 a2=3 a3=0 items=0 ppid=1 pid=5845 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 223.965849] audit: type=1327 audit(1768891507.854:898): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 223.979644] audit: type=1105 audit(1768891507.895:899): pid=5845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 223.989730] audit: type=1103 audit(1768891507.905:900): pid=5849 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 224.628007] audit: type=1106 audit(1768891508.542:901): pid=5845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 224.641765] audit: type=1104 audit(1768891508.542:902): pid=5845 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 229.721244] kauditd_printk_skb: 1 callbacks suppressed [ 229.721248] audit: type=1130 audit(1768891513.636:904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.110:22-68.220.241.50:43996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 230.204956] audit: type=1101 audit(1768891514.120:905): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 230.214566] audit: type=1103 audit(1768891514.123:906): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 230.223001] audit: type=1006 audit(1768891514.123:907): pid=5861 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 230.227946] audit: type=1300 audit(1768891514.123:907): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffed6e6cdb0 a2=3 a3=0 items=0 ppid=1 pid=5861 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 230.237956] audit: type=1327 audit(1768891514.123:907): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 230.241808] audit: type=1105 audit(1768891514.156:908): pid=5861 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 230.253964] audit: type=1103 audit(1768891514.166:909): pid=5865 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 230.600834] audit: type=1106 audit(1768891514.516:910): pid=5861 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 230.609412] audit: type=1104 audit(1768891514.516:911): pid=5861 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 235.702767] kauditd_printk_skb: 1 callbacks suppressed [ 235.702771] audit: type=1130 audit(1768891519.618:913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.30.110:22-68.220.241.50:44012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 236.185623] audit: type=1101 audit(1768891520.101:914): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 236.191094] audit: type=1103 audit(1768891520.103:915): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 236.196267] audit: type=1006 audit(1768891520.103:916): pid=5886 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 236.199756] audit: type=1300 audit(1768891520.103:916): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc8554f6d0 a2=3 a3=0 items=0 ppid=1 pid=5886 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 236.205673] audit: type=1327 audit(1768891520.103:916): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 236.214178] audit: type=1105 audit(1768891520.130:917): pid=5886 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 236.224690] audit: type=1103 audit(1768891520.140:918): pid=5890 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 236.566251] audit: type=1106 audit(1768891520.480:919): pid=5886 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 236.581018] audit: type=1104 audit(1768891520.480:920): pid=5886 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=68.220.241.50 addr=68.220.241.50 terminal=ssh res=success' [ 252.248546] kauditd_printk_skb: 1 callbacks suppressed [ 252.248551] audit: type=1334 audit(1768891536.163:922): prog-id=105 op=UNLOAD [ 252.252661] audit: type=1334 audit(1768891536.163:923): prog-id=109 op=UNLOAD [ 252.255946] audit: type=1334 audit(1768891536.164:924): prog-id=263 op=LOAD [ 252.257501] audit: type=1334 audit(1768891536.164:925): prog-id=90 op=UNLOAD [ 252.517465] audit: type=1334 audit(1768891536.433:926): prog-id=153 op=UNLOAD [ 252.519059] audit: type=1334 audit(1768891536.433:927): prog-id=157 op=UNLOAD [ 253.330365] audit: type=1334 audit(1768891537.245:928): prog-id=264 op=LOAD [ 253.333767] audit: type=1334 audit(1768891537.246:929): prog-id=265 op=LOAD [ 253.337152] audit: type=1300 audit(1768891537.246:929): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001a0238 a2=98 a3=0 items=0 ppid=3666 pid=5974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 253.350957] audit: type=1327 audit(1768891537.246:929): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339613561393064373533356631306336373732643462386334636330