audit(1780530331.503:183): pid=2161 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 48.712982] audit: type=1131 audit(1780530331.510:184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4099-172.31.25.243:22-20.229.252.112:43326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 56.842823] Initializing XFRM netlink socket [ 57.006336] kauditd_printk_skb: 13 callbacks suppressed [ 57.006341] audit: type=1325 audit(1780530339.810:196): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 57.011364] audit: type=1300 audit(1780530339.810:196): arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd7e996a0 a2=0 a3=0 items=0 ppid=2239 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 57.017944] audit: type=1327 audit(1780530339.810:196): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 57.020881] audit: type=1325 audit(1780530339.820:197): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 57.024521] audit: type=1300 audit(1780530339.820:197): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc06e9d30 a2=0 a3=0 items=0 ppid=2239 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 57.031253] audit: type=1327 audit(1780530339.820:197): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 57.034303] audit: type=1325 audit(1780530339.825:198): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 57.037588] audit: type=1300 audit(1780530339.825:198): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd2c22980 a2=0 a3=0 items=0 ppid=2239 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 57.044503] audit: type=1327 audit(1780530339.825:198): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 57.047864] audit: type=1325 audit(1780530339.834:199): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-25-243 (Linux aarch64 6.12.92-flatcar) 23:45:41 SSH host key: SHA256:JGT7ckNBr5u9oSUZctCCehPcc0pleUCADRoCR/UgfcU (ED25519) SSH host key: SHA256:+cTJgDdbQAIa8PgYFn+fvbKxyjX2z1fsSade7boECrs (ECDSA) SSH host key: SHA256:qUOzQgxdmC87Cx3UBCMLSs5rHdvT4KF3AYJk3RLItkw (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.25.243 fe80::428:65ff:fec9:2431 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-25-243 login: [ 62.121177] kauditd_printk_skb: 105 callbacks suppressed [ 62.121184] audit: type=1130 audit(1780530344.924:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 62.244893] audit: type=1131 audit(1780530345.048:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 65.451879] audit: type=1131 audit(1780530348.255:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 65.470332] audit: type=1334 audit(1780530348.274:238): prog-id=38 op=UNLOAD [ 72.935043] audit: type=1130 audit(1780530355.738:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 73.040425] audit: type=1131 audit(1780530355.844:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 78.729904] audit: type=1130 audit(1780530361.533:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 78.734550] audit: type=1131 audit(1780530361.533:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 79.115007] zram_generator::config[2763]: No configuration found. [ 79.985264] audit: type=1334 audit(1780530362.788:243): prog-id=42 op=LOAD [ 79.989283] audit: type=1334 audit(1780530362.788:244): prog-id=35 op=UNLOAD [ 79.994251] audit: type=1334 audit(1780530362.788:245): prog-id=43 op=LOAD [ 79.997247] audit: type=1334 audit(1780530362.790:246): prog-id=44 op=LOAD [ 80.002289] audit: type=1334 audit(1780530362.790:247): prog-id=36 op=UNLOAD [ 80.008257] audit: type=1334 audit(1780530362.790:248): prog-id=37 op=UNLOAD [ 80.009797] audit: type=1334 audit(1780530362.797:249): prog-id=45 op=LOAD [ 80.015251] audit: type=1334 audit(1780530362.797:250): prog-id=26 op=UNLOAD [ 90.020169] zram_generator::config[3353]: No configuration found. [ 90.739856] kauditd_printk_skb: 203 callbacks suppressed [ 90.739862] audit: type=1334 audit(1780530373.543:346): prog-id=92 op=LOAD [ 90.745270] audit: type=1334 audit(1780530373.547:347): prog-id=42 op=UNLOAD [ 90.748395] audit: type=1334 audit(1780530373.547:348): prog-id=93 op=LOAD [ 90.750529] audit: type=1334 audit(1780530373.547:349): prog-id=94 op=LOAD [ 90.752308] audit: type=1334 audit(1780530373.547:350): prog-id=43 op=UNLOAD [ 90.754198] audit: type=1334 audit(1780530373.547:351): prog-id=44 op=UNLOAD [ 90.756431] audit: type=1334 audit(1780530373.547:352): prog-id=95 op=LOAD [ 90.758483] audit: type=1334 audit(1780530373.547:353): prog-id=62 op=UNLOAD [ 90.761879] audit: type=1334 audit(1780530373.553:354): prog-id=96 op=LOAD [ 90.765291] audit: type=1334 audit(1780530373.553:355): prog-id=45 op=UNLOAD [ 96.171143] kauditd_printk_skb: 44 callbacks suppressed [ 96.171149] audit: type=1334 audit(1780530378.974:400): prog-id=118 op=LOAD [ 96.174070] audit: type=1334 audit(1780530378.977:401): prog-id=119 op=LOAD [ 96.175741] audit: type=1300 audit(1780530378.977:401): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001a8190 a2=98 a3=0 items=0 ppid=3462 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.182127] audit: type=1327 audit(1780530378.977:401): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436613964383937383832313037353538666239333538393637623364 [ 96.188228] audit: type=1334 audit(1780530378.977:402): prog-id=119 op=UNLOAD [ 96.189834] audit: type=1300 audit(1780530378.977:402): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3462 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.195976] audit: type=1327 audit(1780530378.977:402): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436613964383937383832313037353538666239333538393637623364 [ 96.203182] audit: type=1334 audit(1780530378.978:403): prog-id=120 op=LOAD [ 96.205447] audit: type=1300 audit(1780530378.978:403): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001a83f8 a2=98 a3=0 items=0 ppid=3462 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.212773] audit: type=1327 audit(1780530378.978:403): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436613964383937383832313037353538666239333538393637623364 [ 106.626464] kauditd_printk_skb: 224 callbacks suppressed [ 106.626470] audit: type=1106 audit(1780530389.429:480): pid=2205 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 106.635499] audit: type=1104 audit(1780530389.429:481): pid=2205 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 106.790463] audit: type=1106 audit(1780530389.594:482): pid=2200 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 106.804448] audit: type=1104 audit(1780530389.601:483): pid=2200 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 106.816976] audit: type=1131 audit(1780530389.613:484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4100-172.31.25.243:22-20.229.252.112:43332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 114.479328] audit: type=1325 audit(1780530397.282:485): table=filter:103 family=2 entries=15 op=nft_register_rule pid=3798 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 114.484553] audit: type=1300 audit(1780530397.282:485): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffd060ef50 a2=0 a3=1 items=0 ppid=3555 pid=3798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.495293] audit: type=1327 audit(1780530397.282:485): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 114.500828] audit: type=1325 audit(1780530397.304:486): table=nat:104 family=2 entries=12 op=nft_register_rule pid=3798 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 114.505562] audit: type=1300 audit(1780530397.304:486): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd060ef50 a2=0 a3=1 items=0 ppid=3555 pid=3798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.516148] audit: type=1327 audit(1780530397.304:486): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 115.561111] audit: type=1325 audit(1780530398.364:487): table=filter:105 family=2 entries=17 op=nft_register_rule pid=3800 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 115.566299] audit: type=1300 audit(1780530398.364:487): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe3c333c0 a2=0 a3=1 items=0 ppid=3555 pid=3800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.575354] audit: type=1327 audit(1780530398.364:487): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 115.582971] audit: type=1325 audit(1780530398.386:488): table=nat:106 family=2 entries=12 op=nft_register_rule pid=3800 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 121.139241] kauditd_printk_skb: 58 callbacks suppressed [ 121.139247] audit: type=1334 audit(1780530403.942:509): prog-id=146 op=LOAD [ 121.145205] audit: type=1334 audit(1780530403.946:510): prog-id=147 op=LOAD [ 121.147453] audit: type=1300 audit(1780530403.946:510): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000106190 a2=98 a3=0 items=0 ppid=3817 pid=3987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.154583] audit: type=1327 audit(1780530403.946:510): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764633533316638363030613539323232396531353164616439653365 [ 121.161411] audit: type=1334 audit(1780530403.947:511): prog-id=147 op=UNLOAD [ 121.165807] audit: type=1300 audit(1780530403.947:511): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3817 pid=3987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.174425] audit: type=1327 audit(1780530403.947:511): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764633533316638363030613539323232396531353164616439653365 [ 121.185155] audit: type=1334 audit(1780530403.948:512): prog-id=148 op=LOAD [ 121.187306] audit: type=1300 audit(1780530403.948:512): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001063f8 a2=98 a3=0 items=0 ppid=3817 pid=3987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 121.194622] audit: type=1327 audit(1780530403.948:512): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764633533316638363030613539323232396531353164616439653365 [ 131.010877] kauditd_printk_skb: 28 callbacks suppressed [ 131.010883] audit: type=1334 audit(1780530413.814:523): prog-id=154 op=LOAD [ 131.014690] audit: type=1300 audit(1780530413.814:523): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=40001303f8 a2=98 a3=0 items=0 ppid=3872 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.021393] audit: type=1327 audit(1780530413.814:523): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130306538643137353530353865323464336632616530386337373461 [ 131.028982] audit: type=1334 audit(1780530413.817:524): prog-id=155 op=LOAD [ 131.030781] audit: type=1300 audit(1780530413.817:524): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000130178 a2=98 a3=0 items=0 ppid=3872 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.037445] audit: type=1327 audit(1780530413.817:524): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130306538643137353530353865323464336632616530386337373461 [ 131.044306] audit: type=1334 audit(1780530413.817:525): prog-id=155 op=UNLOAD [ 131.046354] audit: type=1300 audit(1780530413.817:525): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3872 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.052892] audit: type=1327 audit(1780530413.817:525): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130306538643137353530353865323464336632616530386337373461 [ 131.061918] audit: type=1334 audit(1780530413.817:526): prog-id=154 op=UNLOAD [ 136.136506] kauditd_printk_skb: 6 callbacks suppressed [ 136.136511] audit: type=1334 audit(1780530418.939:529): prog-id=157 op=LOAD [ 136.139842] audit: type=1300 audit(1780530418.939:529): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=40001283f8 a2=98 a3=0 items=0 ppid=3872 pid=4292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.148240] audit: type=1327 audit(1780530418.939:529): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263323466393835303762663861346264323933353030306234313632 [ 136.155397] audit: type=1334 audit(1780530418.940:530): prog-id=158 op=LOAD [ 136.158419] audit: type=1300 audit(1780530418.940:530): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000128178 a2=98 a3=0 items=0 ppid=3872 pid=4292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.166185] audit: type=1327 audit(1780530418.940:530): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263323466393835303762663861346264323933353030306234313632 [ 136.174017] audit: type=1334 audit(1780530418.940:531): prog-id=158 op=UNLOAD [ 136.176045] audit: type=1300 audit(1780530418.940:531): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3872 pid=4292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.184802] audit: type=1327 audit(1780530418.940:531): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263323466393835303762663861346264323933353030306234313632 [ 136.192287] audit: type=1334 audit(1780530418.940:532): prog-id=157 op=UNLOAD [ 142.164164] kauditd_printk_skb: 21 callbacks suppressed [ 142.164170] audit: type=1334 audit(1780530424.967:540): prog-id=163 op=LOAD [ 142.171294] audit: type=1334 audit(1780530424.973:541): prog-id=164 op=LOAD [ 142.174039] audit: type=1300 audit(1780530424.973:541): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000178190 a2=98 a3=0 items=0 ppid=4721 pid=4733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.181635] audit: type=1327 audit(1780530424.973:541): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138383331333562613435303866303766356233353463373162393166 [ 142.191365] audit: type=1334 audit(1780530424.973:542): prog-id=164 op=UNLOAD [ 142.193918] audit: type=1300 audit(1780530424.973:542): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4721 pid=4733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.204249] audit: type=1327 audit(1780530424.973:542): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138383331333562613435303866303766356233353463373162393166 [ 142.214136] audit: type=1334 audit(1780530424.973:543): prog-id=165 op=LOAD [ 142.217099] audit: type=1300 audit(1780530424.973:543): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001783f8 a2=98 a3=0 items=0 ppid=4721 pid=4733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.226125] audit: type=1327 audit(1780530424.973:543): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138383331333562613435303866303766356233353463373162393166 This is ip-172-31-25-243 (Linux aarch64 6.12.92-flatcar) 23:47:07 SSH host key: SHA256:JGT7ckNBr5u9oSUZctCCehPcc0pleUCADRoCR/UgfcU (ED25519) SSH host key: SHA256:+cTJgDdbQAIa8PgYFn+fvbKxyjX2z1fsSade7boECrs (ECDSA) SSH host key: SHA256:qUOzQgxdmC87Cx3UBCMLSs5rHdvT4KF3AYJk3RLItkw (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.25.243 fe80::428:65ff:fec9:2431 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-25-243 login: [ 147.610989] kauditd_printk_skb: 62 callbacks suppressed [ 147.610996] audit: type=1334 audit(1780530430.414:566): prog-id=178 op=LOAD [ 147.616292] audit: type=1300 audit(1780530430.414:566): arch=c00000b7 syscall=280 success=yes exit=13 a0=5 a1=ffff7118e368 a2=94 a3=200000001 items=0 ppid=4636 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.627306] audit: type=1327 audit(1780530430.414:566): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 147.629838] audit: type=1334 audit(1780530430.415:567): prog-id=178 op=UNLOAD [ 147.633272] audit: type=1300 audit(1780530430.415:567): arch=c00000b7 syscall=57 success=yes exit=0 a0=d a1=0 a2=ffff7118f208 a3=200000001 items=0 ppid=4636 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.642295] audit: type=1327 audit(1780530430.415:567): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 147.646117] audit: type=1334 audit(1780530430.415:568): prog-id=179 op=LOAD [ 147.647806] audit: type=1300 audit(1780530430.415:568): arch=c00000b7 syscall=280 success=yes exit=13 a0=5 a1=ffff7118e3d8 a2=98 a3=ffff7118e5e8 items=0 ppid=4636 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.657371] audit: type=1327 audit(1780530430.415:568): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 147.660702] audit: type=1334 audit(1780530430.417:569): prog-id=179 op=UNLOAD This is ip-172-31-25-243 (Linux aarch64 6.12.92-flatcar) 23:47:12 SSH host key: SHA256:JGT7ckNBr5u9oSUZctCCehPcc0pleUCADRoCR/UgfcU (ED25519) SSH host key: SHA256:+cTJgDdbQAIa8PgYFn+fvbKxyjX2z1fsSade7boECrs (ECDSA) SSH host key: SHA256:qUOzQgxdmC87Cx3UBCMLSs5rHdvT4KF3AYJk3RLItkw (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.25.243 fe80::428:65ff:fec9:2431 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-25-243 login: This is ip-172-31-25-243 (Linux aarch64 6.12.92-flatcar) 23:47:14 SSH host key: SHA256:JGT7ckNBr5u9oSUZctCCehPcc0pleUCADRoCR/UgfcU (ED25519) SSH host key: SHA256:+cTJgDdbQAIa8PgYFn+fvbKxyjX2z1fsSade7boECrs (ECDSA) SSH host key: SHA256:qUOzQgxdmC87Cx3UBCMLSs5rHdvT4KF3AYJk3RLItkw (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.25.243 fe80::428:65ff:fec9:2431 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-25-243 login: This is ip-172-31-25-243 (Linux aarch64 6.12.92-flatcar) 23:47:15 SSH host key: SHA256:JGT7ckNBr5u9oSUZctCCehPcc0pleUCADRoCR/UgfcU (ED25519) SSH host key: SHA256:+cTJgDdbQAIa8PgYFn+fvbKxyjX2z1fsSade7boECrs (ECDSA) SSH host key: SHA256:qUOzQgxdmC87Cx3UBCMLSs5rHdvT4KF3AYJk3RLItkw (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.25.243 fe80::428:65ff:fec9:2431 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-25-243 login: [ 153.948718] kauditd_printk_skb: 267 callbacks suppressed [ 153.948723] audit: type=1325 audit(1780530436.750:659): table=filter:122 family=2 entries=46 op=nft_register_chain pid=5285 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 153.957029] audit: type=1300 audit(1780530436.750:659): arch=c00000b7 syscall=211 success=yes exit=23648 a0=3 a1=ffffeb914c00 a2=0 a3=ffffa86377e0 items=0 ppid=4926 pid=5285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.968986] audit: type=1327 audit(1780530436.750:659): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 154.243345] audit: type=1325 audit(1780530437.045:660): table=calico-arp:123 family=3 entries=3 op=nft_register_chain pid=5329 subj=system_u:system_r:kernel_t:s0 comm="nft" [ 154.250201] audit: type=1300 audit(1780530437.045:660): arch=c00000b7 syscall=211 success=yes exit=732 a0=3 a1=ffffea268f88 a2=0 a3=ffffad4f9b00 items=0 ppid=4926 pid=5329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nft" exe="/usr/sbin/nft" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.265991] audit: type=1327 audit(1780530437.045:660): proctitle=2F7573722F7362696E2F6E6674002D66002D [ 154.588771] audit: type=1334 audit(1780530437.391:661): prog-id=221 op=LOAD [ 154.597119] audit: type=1334 audit(1780530437.397:662): prog-id=222 op=LOAD [ 154.602116] audit: type=1300 audit(1780530437.397:662): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000128190 a2=98 a3=0 items=0 ppid=5306 pid=5320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.617991] audit: type=1327 audit(1780530437.397:662): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131356234383338663738393132353239633066306661303133316333 This is ip-172-31-25-243 (Linux aarch64 6.12.92-flatcar) 23:47:18 SSH host key: SHA256:JGT7ckNBr5u9oSUZctCCehPcc0pleUCADRoCR/UgfcU (ED25519) SSH host key: SHA256:+cTJgDdbQAIa8PgYFn+fvbKxyjX2z1fsSade7boECrs (ECDSA) SSH host key: SHA256:qUOzQgxdmC87Cx3UBCMLSs5rHdvT4KF3AYJk3RLItkw (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.25.243 fe80::428:65ff:fec9:2431 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-25-243 login: This is ip-172-31-25-243 (Linux aarch64 6.12.92-flatcar) 23:47:19 SSH host key: SHA256:JGT7ckNBr5u9oSUZctCCehPcc0pleUCADRoCR/UgfcU (ED25519) SSH host key: SHA256:+cTJgDdbQAIa8PgYFn+fvbKxyjX2z1fsSade7boECrs (ECDSA) SSH host key: SHA256:qUOzQgxdmC87Cx3UBCMLSs5rHdvT4KF3AYJk3RLItkw (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.25.243 fe80::428:65ff:fec9:2431 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-25-243 login: This is ip-172-31-25-243 (Linux aarch64 6.12.92-flatcar) 23:47:20 SSH host key: SHA256:JGT7ckNBr5u9oSUZctCCehPcc0pleUCADRoCR/UgfcU (ED25519) SSH host key: SHA256:+cTJgDdbQAIa8PgYFn+fvbKxyjX2z1fsSade7boECrs (ECDSA) SSH host key: SHA256:qUOzQgxdmC87Cx3UBCMLSs5rHdvT4KF3AYJk3RLItkw (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.25.243 fe80::428:65ff:fec9:2431 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-25-243 login: [ 159.126595] kauditd_printk_skb: 224 callbacks suppressed [ 159.126602] audit: type=1325 audit(1780530441.928:743): table=filter:134 family=2 entries=12 op=nft_register_rule pid=5810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 159.135833] audit: type=1300 audit(1780530441.928:743): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffed696c30 a2=0 a3=1 items=0 ppid=3555 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.142949] audit: type=1327 audit(1780530441.928:743): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 159.151000] audit: type=1325 audit(1780530441.953:744): table=nat:135 family=2 entries=46 op=nft_register_rule pid=5810 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 159.155727] audit: type=1300 audit(1780530441.953:744): arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffed696c30 a2=0 a3=1 items=0 ppid=3555 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.163676] audit: type=1327 audit(1780530441.953:744): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-25-243 (Linux aarch64 6.12.92-flatcar) 23:47:22 SSH host key: SHA256:JGT7ckNBr5u9oSUZctCCehPcc0pleUCADRoCR/UgfcU (ED25519) SSH host key: SHA256:+cTJgDdbQAIa8PgYFn+fvbKxyjX2z1fsSade7boECrs (ECDSA) SSH host key: SHA256:qUOzQgxdmC87Cx3UBCMLSs5rHdvT4KF3AYJk3RLItkw (RSA) Try contacting this VM's SSH server via 'ssh vsock%1' from host. eth0: 172.31.25.243 fe80::428:65ff:fec9:2431 Try contacting this VM's SSH server via 'ssh vsock%1' from host. ip-172-31-25-243 login: [ 160.220016] audit: type=1325 audit(1780530443.022:745): table=filter:136 family=2 entries=12 op=nft_register_rule pid=5851 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 160.225808] audit: type=1300 audit(1780530443.022:745): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc0a7fe30 a2=0 a3=1 items=0 ppid=3555 pid=5851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 160.233375] audit: type=1327 audit(1780530443.022:745): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 160.254286] audit: type=1325 audit(1780530443.054:746): table=nat:137 family=2 entries=58 op=nft_register_chain pid=5851 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 164.961417] kauditd_printk_skb: 25 callbacks suppressed [ 164.961422] audit: type=1334 audit(1780530447.764:756): prog-id=271 op=LOAD [ 164.964748] audit: type=1334 audit(1780530447.767:757): prog-id=272 op=LOAD [ 164.966646] audit: type=1300 audit(1780530447.767:757): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001a0190 a2=98 a3=0 items=0 ppid=5424 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.973201] audit: type=1327 audit(1780530447.767:757): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361393661323333636232373037366331646331633639346434646532 [ 164.979658] audit: type=1334 audit(1780530447.767:758): prog-id=272 op=UNLOAD [ 164.981637] audit: type=1300 audit(1780530447.767:758): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5424 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.988860] audit: type=1327 audit(1780530447.767:758): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361393661323333636232373037366331646331633639346434646532 [ 164.997318] audit: type=1334 audit(1780530447.768:759): prog-id=273 op=LOAD [ 164.998936] audit: type=1300 audit(1780530447.768:759): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001a03f8 a2=98 a3=0 items=0 ppid=5424 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.005767] audit: type=1327 audit(1780530447.768:759): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361393661323333636232373037366331646331633639346434646532 [ 171.136510] kauditd_printk_skb: 92 callbacks suppressed [ 171.136516] audit: type=1130 audit(1780530453.939:796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-172.31.25.243:22-20.229.252.112:37400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.035290] audit: type=1101 audit(1780530454.839:797): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 172.043164] audit: type=1103 audit(1780530454.846:798): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 172.049707] audit: type=1006 audit(1780530454.852:799): pid=6138 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 172.053855] audit: type=1300 audit(1780530454.852:799): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe4ce19b0 a2=3 a3=0 items=0 ppid=1 pid=6138 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.061286] audit: type=1327 audit(1780530454.852:799): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 172.086573] audit: type=1105 audit(1780530454.890:800): pid=6138 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 172.096321] audit: type=1103 audit(1780530454.900:801): pid=6142 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 172.715080] audit: type=1106 audit(1780530455.518:802): pid=6138 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 172.727573] audit: type=1104 audit(1780530455.518:803): pid=6138 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 177.896981] kauditd_printk_skb: 1 callbacks suppressed [ 177.896987] audit: type=1130 audit(1780530460.700:805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4101-172.31.25.243:22-20.229.252.112:41016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.231501] audit: type=1325 audit(1780530461.034:806): table=filter:144 family=2 entries=10 op=nft_register_rule pid=6189 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 178.235574] audit: type=1300 audit(1780530461.034:806): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff119c7f0 a2=0 a3=1 items=0 ppid=3555 pid=6189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.242525] audit: type=1327 audit(1780530461.034:806): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 178.276446] audit: type=1325 audit(1780530461.079:807): table=nat:145 family=2 entries=36 op=nft_register_chain pid=6189 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 178.279858] audit: type=1300 audit(1780530461.079:807): arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff119c7f0 a2=0 a3=1 items=0 ppid=3555 pid=6189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.286742] audit: type=1327 audit(1780530461.079:807): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 178.801655] audit: type=1101 audit(1780530461.605:808): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 178.809940] audit: type=1103 audit(1780530461.613:809): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 178.816200] audit: type=1006 audit(1780530461.614:810): pid=6185 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 184.677303] kauditd_printk_skb: 16 callbacks suppressed [ 184.677309] audit: type=1130 audit(1780530467.480:819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-6-172.31.25.243:22-20.229.252.112:41026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.595577] audit: type=1101 audit(1780530468.399:820): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 185.608321] audit: type=1103 audit(1780530468.408:821): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 185.614986] audit: type=1006 audit(1780530468.408:822): pid=6254 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 185.623857] audit: type=1300 audit(1780530468.408:822): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff866d390 a2=3 a3=0 items=0 ppid=1 pid=6254 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.633751] audit: type=1327 audit(1780530468.408:822): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 185.658338] audit: type=1105 audit(1780530468.462:823): pid=6254 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 185.670866] audit: type=1103 audit(1780530468.474:824): pid=6258 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 186.350243] audit: type=1106 audit(1780530469.153:825): pid=6254 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 186.371084] audit: type=1104 audit(1780530469.161:826): pid=6254 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 189.963407] kauditd_printk_skb: 26 callbacks suppressed [ 189.963419] audit: type=1106 audit(1780530472.767:845): pid=6317 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 189.976250] audit: type=1104 audit(1780530472.767:846): pid=6317 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 189.983875] audit: type=1131 audit(1780530472.783:847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-8-172.31.25.243:22-20.229.252.112:51718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.134144] audit: type=1130 audit(1780530477.937:848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-9-172.31.25.243:22-20.229.252.112:35440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.022517] audit: type=1101 audit(1780530478.826:849): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 196.030391] audit: type=1103 audit(1780530478.833:850): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 196.036950] audit: type=1006 audit(1780530478.834:851): pid=6420 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 196.041887] audit: type=1300 audit(1780530478.834:851): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc7e89760 a2=3 a3=0 items=0 ppid=1 pid=6420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.051290] audit: type=1327 audit(1780530478.834:851): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 196.072777] audit: type=1105 audit(1780530478.875:852): pid=6420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 196.081527] audit: type=1103 audit(1780530478.885:853): pid=6424 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 196.553247] audit: type=1325 audit(1780530479.347:854): table=filter:151 family=2 entries=124 op=nft_register_chain pid=6441 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 196.558677] audit: type=1300 audit(1780530479.347:854): arch=c00000b7 syscall=211 success=yes exit=59176 a0=3 a1=fffffa0e66c0 a2=0 a3=ffffb43887e0 items=0 ppid=4926 pid=6441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.365815] kauditd_printk_skb: 18 callbacks suppressed [ 200.365821] audit: type=1106 audit(1780530483.169:866): pid=6469 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 200.374651] audit: type=1104 audit(1780530483.169:867): pid=6469 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 200.380860] audit: type=1131 audit(1780530483.179:868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10-172.31.25.243:22-20.229.252.112:35456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.546268] audit: type=1130 audit(1780530483.349:869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4102-172.31.25.243:22-20.229.252.112:35470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 201.442089] audit: type=1101 audit(1780530484.245:870): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 201.452064] audit: type=1103 audit(1780530484.253:871): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 201.460520] audit: type=1006 audit(1780530484.254:872): pid=6484 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 201.465267] audit: type=1300 audit(1780530484.254:872): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc180bfb0 a2=3 a3=0 items=0 ppid=1 pid=6484 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 201.472106] audit: type=1327 audit(1780530484.254:872): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 201.488963] audit: type=1105 audit(1780530484.292:873): pid=6484 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 205.489171] kauditd_printk_skb: 27 callbacks suppressed [ 205.489176] audit: type=1130 audit(1780530488.292:891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4104-172.31.25.243:22-20.229.252.112:37280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.399498] audit: type=1101 audit(1780530489.203:892): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 206.407380] audit: type=1103 audit(1780530489.211:893): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 206.414139] audit: type=1006 audit(1780530489.211:894): pid=6585 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 206.417962] audit: type=1300 audit(1780530489.211:894): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd35a11f0 a2=3 a3=0 items=0 ppid=1 pid=6585 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.424465] audit: type=1327 audit(1780530489.211:894): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 206.438448] audit: type=1105 audit(1780530489.242:895): pid=6585 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 206.448557] audit: type=1103 audit(1780530489.252:896): pid=6589 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 207.037867] audit: type=1106 audit(1780530489.841:897): pid=6585 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 207.045193] audit: type=1104 audit(1780530489.843:898): pid=6585 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 210.928282] kauditd_printk_skb: 1 callbacks suppressed [ 210.928288] audit: type=1325 audit(1780530493.731:900): table=filter:158 family=2 entries=20 op=nft_register_rule pid=6608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 210.934555] audit: type=1300 audit(1780530493.731:900): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffce457420 a2=0 a3=1 items=0 ppid=3555 pid=6608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.943414] audit: type=1327 audit(1780530493.731:900): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 210.946768] audit: type=1325 audit(1780530493.738:901): table=nat:159 family=2 entries=110 op=nft_register_chain pid=6608 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 210.951378] audit: type=1300 audit(1780530493.738:901): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffce457420 a2=0 a3=1 items=0 ppid=3555 pid=6608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.960441] audit: type=1327 audit(1780530493.738:901): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 212.216562] audit: type=1130 audit(1780530495.019:902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-11-172.31.25.243:22-20.229.252.112:37282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 213.125353] audit: type=1101 audit(1780530495.929:903): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 213.132412] audit: type=1103 audit(1780530495.935:904): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 213.139312] audit: type=1006 audit(1780530495.936:905): pid=6612 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 218.936625] kauditd_printk_skb: 7 callbacks suppressed [ 218.936630] audit: type=1130 audit(1780530501.739:911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-12-172.31.25.243:22-20.229.252.112:34512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 219.852989] audit: type=1101 audit(1780530502.656:912): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 219.860323] audit: type=1103 audit(1780530502.664:913): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 219.865975] audit: type=1006 audit(1780530502.664:914): pid=6637 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 219.871203] audit: type=1300 audit(1780530502.664:914): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff0499ea0 a2=3 a3=0 items=0 ppid=1 pid=6637 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 219.878107] audit: type=1327 audit(1780530502.664:914): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 219.900684] audit: type=1105 audit(1780530502.704:915): pid=6637 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 219.908899] audit: type=1103 audit(1780530502.712:916): pid=6666 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 220.543253] audit: type=1106 audit(1780530503.346:917): pid=6637 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 220.553262] audit: type=1104 audit(1780530503.347:918): pid=6637 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 225.725882] kauditd_printk_skb: 1 callbacks suppressed [ 225.725888] audit: type=1130 audit(1780530508.529:920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-13-172.31.25.243:22-20.229.252.112:34714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 226.628973] audit: type=1101 audit(1780530509.432:921): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 226.638335] audit: type=1103 audit(1780530509.439:922): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 226.645520] audit: type=1006 audit(1780530509.439:923): pid=6699 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 226.653560] audit: type=1300 audit(1780530509.439:923): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdf6b98c0 a2=3 a3=0 items=0 ppid=1 pid=6699 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.661081] audit: type=1327 audit(1780530509.439:923): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 226.676927] audit: type=1105 audit(1780530509.480:924): pid=6699 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 226.688766] audit: type=1103 audit(1780530509.492:925): pid=6703 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 227.292820] audit: type=1106 audit(1780530510.096:926): pid=6699 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 227.304144] audit: type=1104 audit(1780530510.096:927): pid=6699 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 232.469575] kauditd_printk_skb: 1 callbacks suppressed [ 232.469581] audit: type=1130 audit(1780530515.272:929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4105-172.31.25.243:22-20.229.252.112:34726 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 233.365926] audit: type=1101 audit(1780530516.169:930): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 233.373180] audit: type=1103 audit(1780530516.176:931): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 233.378970] audit: type=1006 audit(1780530516.177:932): pid=6727 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 233.382540] audit: type=1300 audit(1780530516.177:932): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd549a7a0 a2=3 a3=0 items=0 ppid=1 pid=6727 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 233.389618] audit: type=1327 audit(1780530516.177:932): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 233.417342] audit: type=1105 audit(1780530516.220:933): pid=6727 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 233.427014] audit: type=1103 audit(1780530516.229:934): pid=6755 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 233.981008] audit: type=1106 audit(1780530516.784:935): pid=6727 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 233.988770] audit: type=1104 audit(1780530516.784:936): pid=6727 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'