[ 136.338050] audit: type=1300 audit(1783457296.286:591): arch=c000003e syscall=321 success=yes exit=13 a0=5 a1=7fd6a7ffea10 a2=94 a3=58b190c items=0 ppid=4580 pid=4588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.347775] audit: type=1327 audit(1783457296.286:591): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 136.352094] audit: type=1334 audit(1783457296.290:592): prog-id=185 op=UNLOAD [ 136.354745] audit: type=1300 audit(1783457296.290:592): arch=c000003e syscall=3 success=yes exit=0 a0=d a1=2 a2=2 a3=58b190c items=0 ppid=4580 pid=4588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.365058] audit: type=1327 audit(1783457296.290:592): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 136.368148] audit: type=1334 audit(1783457296.290:593): prog-id=186 op=LOAD [ 136.370904] audit: type=1300 audit(1783457296.290:593): arch=c000003e syscall=321 success=yes exit=13 a0=5 a1=7fd6a7ffea40 a2=98 a3=2 items=0 ppid=4580 pid=4588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.381055] audit: type=1327 audit(1783457296.290:593): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 136.384141] audit: type=1334 audit(1783457296.290:594): prog-id=186 op=UNLOAD This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:20 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:20 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 ip-172-31-31-45 login: This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:21 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:21 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 ip-172-31-31-45 login: [ 142.017047] kauditd_printk_skb: 261 callbacks suppressed [ 142.017051] audit: type=1334 audit(1783457301.970:682): prog-id=228 op=LOAD [ 142.022120] audit: type=1334 audit(1783457301.970:683): prog-id=229 op=LOAD [ 142.024475] audit: type=1300 audit(1783457301.970:683): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a238 a2=98 a3=0 items=0 ppid=4914 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.033389] audit: type=1327 audit(1783457301.970:683): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636337653536613839636466343839393138353231353236336564 [ 142.042323] audit: type=1334 audit(1783457301.970:684): prog-id=229 op=UNLOAD [ 142.045044] audit: type=1300 audit(1783457301.970:684): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4914 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.052764] audit: type=1327 audit(1783457301.970:684): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636337653536613839636466343839393138353231353236336564 [ 142.061528] audit: type=1334 audit(1783457301.973:685): prog-id=230 op=LOAD [ 142.063570] audit: type=1300 audit(1783457301.973:685): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c00017a488 a2=98 a3=0 items=0 ppid=4914 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.072067] audit: type=1327 audit(1783457301.973:685): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436636337653536613839636466343839393138353231353236336564 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:22 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:22 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 ip-172-31-31-45 login: This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:24 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:24 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 ip-172-31-31-45 login: This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:25 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:25 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 ip-172-31-31-45 login: This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:26 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:26 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 ip-172-31-31-45 login: [ 147.508727] kauditd_printk_skb: 285 callbacks suppressed [ 147.508732] audit: type=1325 audit(1783457307.458:787): table=filter:140 family=2 entries=14 op=nft_register_rule pid=5684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.512678] audit: type=1300 audit(1783457307.458:787): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffec7ca7480 a2=0 a3=7ffec7ca746c items=0 ppid=3601 pid=5684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.519414] audit: type=1327 audit(1783457307.458:787): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 147.567600] audit: type=1325 audit(1783457307.520:788): table=nat:141 family=2 entries=56 op=nft_register_chain pid=5684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.570661] audit: type=1300 audit(1783457307.520:788): arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffec7ca7480 a2=0 a3=7ffec7ca746c items=0 ppid=3601 pid=5684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.576811] audit: type=1327 audit(1783457307.520:788): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:27 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:27 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 ip-172-31-31-45 login: [ 148.323552] audit: type=1334 audit(1783457308.277:789): prog-id=281 op=LOAD [ 148.325229] audit: type=1334 audit(1783457308.278:790): prog-id=282 op=LOAD [ 148.326681] audit: type=1300 audit(1783457308.278:790): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000128238 a2=98 a3=0 items=0 ppid=4839 pid=5691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.332351] audit: type=1327 audit(1783457308.278:790): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665373636323835613532656634336631326136326566633931656265 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:28 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 This is ip-172-31-31-45 (Linux x86_64 6.12.95-flatcar) 20:48:28 SSH host key: SHA256:Yt4MTKHblOZldJuQF9mmAb9aamP3xV4sZXNRrBlFKgk (ED25519) SSH host key: SHA256:Npn7m7/e/acjfWIB9oTsAqx2RIIlacRIiKWmHXy2pQE (ECDSA) SSH host key: SHA256:gx+ekI2gy1OBGRgHpY+WUaxTUUbPx5ljJbZPIp3LYqQ (RSA) eth0: 172.31.31.45 fe80::4b1:d4ff:fe82:5261 ip-172-31-31-45 login: [ 152.514304] kauditd_printk_skb: 49 callbacks suppressed [ 152.514309] audit: type=1325 audit(1783457312.467:808): table=nat:145 family=2 entries=22 op=nft_register_rule pid=5788 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 152.518720] audit: type=1300 audit(1783457312.467:808): arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe4a5f4cc0 a2=0 a3=7ffe4a5f4cac items=0 ppid=3601 pid=5788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.525825] audit: type=1327 audit(1783457312.467:808): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 155.608484] audit: type=1334 audit(1783457315.562:809): prog-id=291 op=LOAD [ 155.610336] audit: type=1334 audit(1783457315.563:810): prog-id=292 op=LOAD [ 155.611870] audit: type=1300 audit(1783457315.563:810): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c000106238 a2=98 a3=0 items=0 ppid=5254 pid=5801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.619570] audit: type=1327 audit(1783457315.563:810): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333135633137616239323963353234396332666231326566326366 [ 155.625709] audit: type=1334 audit(1783457315.563:811): prog-id=292 op=UNLOAD [ 155.627644] audit: type=1300 audit(1783457315.563:811): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5254 pid=5801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.634246] audit: type=1327 audit(1783457315.563:811): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131333135633137616239323963353234396332666231326566326366 [ 159.773984] kauditd_printk_skb: 21 callbacks suppressed [ 159.773990] audit: type=1334 audit(1783457319.727:819): prog-id=296 op=LOAD [ 159.776675] audit: type=1334 audit(1783457319.728:820): prog-id=297 op=LOAD [ 159.778107] audit: type=1300 audit(1783457319.728:820): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001fa238 a2=98 a3=0 items=0 ppid=5449 pid=5915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.784606] audit: type=1327 audit(1783457319.728:820): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361346637356635663631333235343839383263663466353339636332 [ 159.790687] audit: type=1334 audit(1783457319.728:821): prog-id=297 op=UNLOAD [ 159.792336] audit: type=1300 audit(1783457319.728:821): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5449 pid=5915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.798463] audit: type=1327 audit(1783457319.728:821): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361346637356635663631333235343839383263663466353339636332 [ 159.804565] audit: type=1334 audit(1783457319.729:822): prog-id=298 op=LOAD [ 159.806191] audit: type=1300 audit(1783457319.729:822): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c0001fa488 a2=98 a3=0 items=0 ppid=5449 pid=5915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.816464] audit: type=1327 audit(1783457319.729:822): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361346637356635663631333235343839383263663466353339636332 [ 166.987733] kauditd_printk_skb: 55 callbacks suppressed [ 166.987737] audit: type=1325 audit(1783457326.941:842): table=filter:150 family=2 entries=11 op=nft_register_rule pid=6098 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 167.003144] audit: type=1300 audit(1783457326.941:842): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe498c4d90 a2=0 a3=7ffe498c4d7c items=0 ppid=3601 pid=6098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.020036] audit: type=1327 audit(1783457326.941:842): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 167.029523] audit: type=1325 audit(1783457326.956:843): table=nat:151 family=2 entries=29 op=nft_register_chain pid=6098 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 167.035147] audit: type=1300 audit(1783457326.956:843): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffe498c4d90 a2=0 a3=7ffe498c4d7c items=0 ppid=3601 pid=6098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.042320] audit: type=1327 audit(1783457326.956:843): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 171.955587] audit: type=1325 audit(1783457331.909:844): table=filter:152 family=2 entries=10 op=nft_register_rule pid=6104 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 171.961137] audit: type=1300 audit(1783457331.909:844): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff2b253bc0 a2=0 a3=7fff2b253bac items=0 ppid=3601 pid=6104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.967743] audit: type=1327 audit(1783457331.909:844): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 171.970309] audit: type=1325 audit(1783457331.918:845): table=nat:153 family=2 entries=36 op=nft_register_chain pid=6104 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 173.992261] kauditd_printk_skb: 2 callbacks suppressed [ 173.992265] audit: type=1325 audit(1783457333.945:846): table=filter:154 family=2 entries=109 op=nft_register_chain pid=6114 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 173.996670] audit: type=1300 audit(1783457333.945:846): arch=c000003e syscall=46 success=yes exit=48476 a0=3 a1=7ffe9541c890 a2=0 a3=7ffe9541c87c items=0 ppid=4588 pid=6114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.002654] audit: type=1327 audit(1783457333.945:846): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 175.336131] audit: type=1325 audit(1783457335.289:847): table=filter:155 family=2 entries=117 op=nft_register_chain pid=6142 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 175.339336] audit: type=1300 audit(1783457335.289:847): arch=c000003e syscall=46 success=yes exit=53712 a0=3 a1=7ffde32aefd0 a2=0 a3=7ffde32aefbc items=0 ppid=4588 pid=6142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.345536] audit: type=1327 audit(1783457335.289:847): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 180.170976] audit: type=1130 audit(1783457340.124:848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.31.45:22-20.229.252.112:44860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 181.130944] audit: type=1101 audit(1783457341.084:849): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 181.137058] audit: type=1103 audit(1783457341.084:850): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 181.142882] audit: type=1006 audit(1783457341.084:851): pid=6166 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 181.146208] audit: type=1300 audit(1783457341.084:851): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff2f95b020 a2=3 a3=0 items=0 ppid=1 pid=6166 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.152624] audit: type=1327 audit(1783457341.084:851): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 181.178201] audit: type=1105 audit(1783457341.127:852): pid=6166 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 181.185141] audit: type=1103 audit(1783457341.132:853): pid=6177 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 183.808041] audit: type=1106 audit(1783457343.760:854): pid=6166 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 183.828039] audit: type=1104 audit(1783457343.760:855): pid=6166 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 188.957852] kauditd_printk_skb: 10 callbacks suppressed [ 188.957857] audit: type=1130 audit(1783457348.911:860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.31.45:22-20.229.252.112:33866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.853159] audit: type=1101 audit(1783457349.807:861): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 189.860324] audit: type=1103 audit(1783457349.808:862): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 189.867633] audit: type=1006 audit(1783457349.809:863): pid=6236 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 189.870904] audit: type=1300 audit(1783457349.809:863): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeee06fd10 a2=3 a3=0 items=0 ppid=1 pid=6236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.877579] audit: type=1327 audit(1783457349.809:863): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 189.886767] audit: type=1105 audit(1783457349.840:864): pid=6236 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 189.893554] audit: type=1103 audit(1783457349.844:865): pid=6243 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.880415] audit: type=1106 audit(1783457350.833:866): pid=6236 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.889037] audit: type=1104 audit(1783457350.837:867): pid=6236 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 196.030686] kauditd_printk_skb: 7 callbacks suppressed [ 196.030691] audit: type=1130 audit(1783457355.984:871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.31.45:22-20.229.252.112:33882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.045174] audit: type=1101 audit(1783457356.999:872): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.051414] audit: type=1103 audit(1783457357.001:873): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.057294] audit: type=1006 audit(1783457357.001:874): pid=6314 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 197.060586] audit: type=1300 audit(1783457357.001:874): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff7a5e2050 a2=3 a3=0 items=0 ppid=1 pid=6314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.066784] audit: type=1327 audit(1783457357.001:874): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 197.092967] audit: type=1105 audit(1783457357.046:875): pid=6314 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.105059] audit: type=1103 audit(1783457357.057:876): pid=6320 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.900029] audit: type=1106 audit(1783457357.853:877): pid=6314 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.912331] audit: type=1104 audit(1783457357.853:878): pid=6314 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.064501] kauditd_printk_skb: 1 callbacks suppressed [ 203.064504] audit: type=1130 audit(1783457363.018:880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.31.45:22-20.229.252.112:37292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.951030] audit: type=1101 audit(1783457363.904:881): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.959206] audit: type=1103 audit(1783457363.907:882): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.981025] audit: type=1006 audit(1783457363.907:883): pid=6333 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 203.986846] audit: type=1300 audit(1783457363.907:883): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcea816840 a2=3 a3=0 items=0 ppid=1 pid=6333 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.992896] audit: type=1327 audit(1783457363.907:883): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 204.001705] audit: type=1105 audit(1783457363.955:884): pid=6333 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 204.011228] audit: type=1103 audit(1783457363.964:885): pid=6337 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 204.664016] audit: type=1106 audit(1783457364.617:886): pid=6333 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 204.679396] audit: type=1104 audit(1783457364.625:887): pid=6333 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 209.833187] kauditd_printk_skb: 1 callbacks suppressed [ 209.833191] audit: type=1130 audit(1783457369.785:889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.31.45:22-20.229.252.112:57004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 210.803297] audit: type=1101 audit(1783457370.757:890): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 210.812611] audit: type=1103 audit(1783457370.759:891): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 210.819256] audit: type=1006 audit(1783457370.759:892): pid=6379 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 210.822496] audit: type=1300 audit(1783457370.759:892): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffecf332b80 a2=3 a3=0 items=0 ppid=1 pid=6379 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.829641] audit: type=1327 audit(1783457370.759:892): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 210.845022] audit: type=1105 audit(1783457370.797:893): pid=6379 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 210.852094] audit: type=1103 audit(1783457370.801:894): pid=6384 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 211.808081] audit: type=1106 audit(1783457371.762:895): pid=6379 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 211.816894] audit: type=1104 audit(1783457371.762:896): pid=6379 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 214.943401] kauditd_printk_skb: 13 callbacks suppressed [ 214.943405] audit: type=1101 audit(1783457374.896:908): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 214.962018] audit: type=1103 audit(1783457374.907:909): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 214.972601] audit: type=1006 audit(1783457374.907:910): pid=6436 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 214.977837] audit: type=1300 audit(1783457374.907:910): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdb1082da0 a2=3 a3=0 items=0 ppid=1 pid=6436 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.990016] audit: type=1327 audit(1783457374.907:910): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 214.995573] audit: type=1105 audit(1783457374.948:911): pid=6436 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 215.002574] audit: type=1103 audit(1783457374.951:912): pid=6440 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 216.085017] audit: type=1106 audit(1783457376.038:913): pid=6436 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 216.097820] audit: type=1104 audit(1783457376.039:914): pid=6436 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 216.107191] audit: type=1131 audit(1783457376.047:915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.31.45:22-20.229.252.112:57020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 221.252727] audit: type=1130 audit(1783457381.205:916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.31.45:22-20.229.252.112:39366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 222.193019] audit: type=1101 audit(1783457382.146:917): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 222.200255] audit: type=1103 audit(1783457382.147:918): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 222.219262] audit: type=1006 audit(1783457382.147:919): pid=6533 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 222.229398] audit: type=1300 audit(1783457382.147:919): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcd7db0220 a2=3 a3=0 items=0 ppid=1 pid=6533 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 222.244014] audit: type=1327 audit(1783457382.147:919): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 222.246715] audit: type=1105 audit(1783457382.195:920): pid=6533 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 222.253726] audit: type=1103 audit(1783457382.201:921): pid=6537 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 223.193553] audit: type=1106 audit(1783457383.147:922): pid=6533 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 223.200247] audit: type=1104 audit(1783457383.147:923): pid=6533 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 228.346970] kauditd_printk_skb: 1 callbacks suppressed [ 228.346975] audit: type=1130 audit(1783457388.300:925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.31.45:22-20.229.252.112:39374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 229.331401] audit: type=1101 audit(1783457389.285:926): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 229.339892] audit: type=1103 audit(1783457389.293:927): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 229.346440] audit: type=1006 audit(1783457389.293:928): pid=6580 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 229.351328] audit: type=1300 audit(1783457389.293:928): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd7e2ae2f0 a2=3 a3=0 items=0 ppid=1 pid=6580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 229.359106] audit: type=1327 audit(1783457389.293:928): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 229.394609] audit: type=1105 audit(1783457389.347:929): pid=6580 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 229.402711] audit: type=1103 audit(1783457389.356:930): pid=6584 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 231.083785] audit: type=1106 audit(1783457391.037:931): pid=6580 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 231.092280] audit: type=1104 audit(1783457391.040:932): pid=6580 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 233.369284] kauditd_printk_skb: 12 callbacks suppressed [ 233.369288] audit: type=1130 audit(1783457393.323:943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.31.45:22-20.229.252.112:34090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 234.353941] audit: type=1101 audit(1783457394.307:944): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 234.364748] audit: type=1103 audit(1783457394.317:945): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 234.376751] audit: type=1006 audit(1783457394.317:946): pid=6615 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 234.380205] audit: type=1300 audit(1783457394.317:946): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdb04edae0 a2=3 a3=0 items=0 ppid=1 pid=6615 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 234.386748] audit: type=1327 audit(1783457394.317:946): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 234.406200] audit: type=1105 audit(1783457394.359:947): pid=6615 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 234.413219] audit: type=1103 audit(1783457394.363:948): pid=6622 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 235.932682] audit: type=1325 audit(1783457395.886:949): table=filter:161 family=2 entries=20 op=nft_register_rule pid=6662 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 235.937632] audit: type=1300 audit(1783457395.886:949): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe7dd70fd0 a2=0 a3=7ffe7dd70fbc items=0 ppid=3601 pid=6662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 238.788306] kauditd_printk_skb: 21 callbacks suppressed [ 238.788310] audit: type=1106 audit(1783457398.742:962): pid=6667 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 238.799266] audit: type=1104 audit(1783457398.742:963): pid=6667 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 238.807021] audit: type=1131 audit(1783457398.750:964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.31.45:22-20.229.252.112:34106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 238.931001] audit: type=1130 audit(1783457398.884:965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.31.45:22-20.229.252.112:53108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 239.863967] audit: type=1101 audit(1783457399.817:966): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 239.871449] audit: type=1103 audit(1783457399.825:967): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 239.877570] audit: type=1006 audit(1783457399.825:968): pid=6701 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 239.882801] audit: type=1300 audit(1783457399.825:968): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe301d02b0 a2=3 a3=0 items=0 ppid=1 pid=6701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 239.893643] audit: type=1327 audit(1783457399.825:968): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 239.905682] audit: type=1105 audit(1783457399.859:969): pid=6701 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 245.809456] kauditd_printk_skb: 4 callbacks suppressed [ 245.809460] audit: type=1130 audit(1783457405.763:974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.31.45:22-20.229.252.112:53120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 246.774829] audit: type=1101 audit(1783457406.728:975): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 246.787701] audit: type=1103 audit(1783457406.740:976): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 246.795601] audit: type=1006 audit(1783457406.740:977): pid=6717 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 246.800336] audit: type=1300 audit(1783457406.740:977): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffead22fb30 a2=3 a3=0 items=0 ppid=1 pid=6717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 246.808617] audit: type=1327 audit(1783457406.740:977): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 246.829487] audit: type=1105 audit(1783457406.783:978): pid=6717 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 246.840011] audit: type=1103 audit(1783457406.792:979): pid=6721 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 247.788539] audit: type=1106 audit(1783457407.742:980): pid=6717 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 247.797569] audit: type=1104 audit(1783457407.742:981): pid=6717 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 251.821354] kauditd_printk_skb: 1 callbacks suppressed [ 251.821358] audit: type=1325 audit(1783457411.775:983): table=filter:165 family=2 entries=20 op=nft_register_rule pid=6775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 251.825723] audit: type=1300 audit(1783457411.775:983): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd77a44fe0 a2=0 a3=7ffd77a44fcc items=0 ppid=3601 pid=6775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 251.831692] audit: type=1327 audit(1783457411.775:983): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 251.834226] audit: type=1325 audit(1783457411.784:984): table=nat:166 family=2 entries=110 op=nft_register_chain pid=6775 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 251.837030] audit: type=1300 audit(1783457411.784:984): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffd77a44fe0 a2=0 a3=7ffd77a44fcc items=0 ppid=3601 pid=6775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 251.842886] audit: type=1327 audit(1783457411.784:984): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 252.953186] audit: type=1130 audit(1783457412.907:985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.31.45:22-20.229.252.112:41166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 253.912191] audit: type=1101 audit(1783457413.866:986): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 253.922343] audit: type=1103 audit(1783457413.876:987): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 253.928766] audit: type=1006 audit(1783457413.876:988): pid=6777 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 260.570224] kauditd_printk_skb: 7 callbacks suppressed [ 260.570228] audit: type=1130 audit(1783457420.524:994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.31.45:22-20.229.252.112:56962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 261.454435] audit: type=1101 audit(1783457421.408:995): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 261.460599] audit: type=1103 audit(1783457421.411:996): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 261.466311] audit: type=1006 audit(1783457421.411:997): pid=6822 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 261.469770] audit: type=1300 audit(1783457421.411:997): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc3dd1efe0 a2=3 a3=0 items=0 ppid=1 pid=6822 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 261.476332] audit: type=1327 audit(1783457421.411:997): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 261.484564] audit: type=1105 audit(1783457421.438:998): pid=6822 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 261.492407] audit: type=1103 audit(1783457421.446:999): pid=6826 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 262.378422] audit: type=1106 audit(1783457422.331:1000): pid=6822 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 262.385478] audit: type=1104 audit(1783457422.331:1001): pid=6822 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 267.544433] kauditd_printk_skb: 1 callbacks suppressed [ 267.544437] audit: type=1130 audit(1783457427.498:1003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.31.45:22-20.229.252.112:56972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 268.431182] audit: type=1101 audit(1783457428.385:1004): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 268.437831] audit: type=1103 audit(1783457428.387:1005): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 268.443870] audit: type=1006 audit(1783457428.387:1006): pid=6847 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 268.447135] audit: type=1300 audit(1783457428.387:1006): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcf4d5cdc0 a2=3 a3=0 items=0 ppid=1 pid=6847 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 268.452911] audit: type=1327 audit(1783457428.387:1006): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 268.471934] audit: type=1105 audit(1783457428.425:1007): pid=6847 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 268.478515] audit: type=1103 audit(1783457428.432:1008): pid=6851 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 269.151789] audit: type=1106 audit(1783457429.105:1009): pid=6847 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 269.161713] audit: type=1104 audit(1783457429.105:1010): pid=6847 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 274.316369] kauditd_printk_skb: 1 callbacks suppressed [ 274.316374] audit: type=1130 audit(1783457434.270:1012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.31.45:22-20.229.252.112:34644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 275.261439] audit: type=1101 audit(1783457435.215:1013): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 275.267922] audit: type=1103 audit(1783457435.218:1014): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 275.273677] audit: type=1006 audit(1783457435.218:1015): pid=6887 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 [ 275.276895] audit: type=1300 audit(1783457435.218:1015): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc45ff4610 a2=3 a3=0 items=0 ppid=1 pid=6887 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 275.289993] audit: type=1327 audit(1783457435.218:1015): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 275.304229] audit: type=1105 audit(1783457435.258:1016): pid=6887 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 275.316016] audit: type=1103 audit(1783457435.267:1017): pid=6891 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 277.160583] audit: type=1106 audit(1783457437.114:1018): pid=6887 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 277.184356] audit: type=1104 audit(1783457437.124:1019): pid=6887 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'