id=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.093573] audit: type=1327 audit(1781049912.459:389): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383434656631333938326439376631396130386363633666633634 [ 97.099553] audit: type=1334 audit(1781049912.459:390): prog-id=116 op=UNLOAD [ 97.101130] audit: type=1300 audit(1781049912.459:390): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3585 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.106858] audit: type=1327 audit(1781049912.459:390): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383434656631333938326439376631396130386363633666633634 [ 97.112535] audit: type=1334 audit(1781049912.459:391): prog-id=117 op=LOAD [ 97.114461] audit: type=1300 audit(1781049912.459:391): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=40001063f8 a2=98 a3=0 items=0 ppid=3585 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.120832] audit: type=1327 audit(1781049912.459:391): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383434656631333938326439376631396130386363633666633634 [ 109.407857] kauditd_printk_skb: 224 callbacks suppressed [ 109.407862] audit: type=1106 audit(1781049924.782:468): pid=2331 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 109.414700] audit: type=1104 audit(1781049924.782:469): pid=2331 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 109.571956] audit: type=1106 audit(1781049924.945:470): pid=2326 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 109.589361] audit: type=1104 audit(1781049924.945:471): pid=2326 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 109.601360] audit: type=1131 audit(1781049924.955:472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4101-172.31.26.247:22-20.229.252.112:34820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 115.247842] audit: type=1325 audit(1781049930.621:473): table=filter:103 family=2 entries=15 op=nft_register_rule pid=3930 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 115.254799] audit: type=1300 audit(1781049930.621:473): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe67588a0 a2=0 a3=1 items=0 ppid=3664 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.263188] audit: type=1327 audit(1781049930.621:473): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 115.267418] audit: type=1325 audit(1781049930.641:474): table=nat:104 family=2 entries=12 op=nft_register_rule pid=3930 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 115.271850] audit: type=1300 audit(1781049930.641:474): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe67588a0 a2=0 a3=1 items=0 ppid=3664 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 115.281763] audit: type=1327 audit(1781049930.641:474): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 116.317100] audit: type=1325 audit(1781049931.690:475): table=filter:105 family=2 entries=17 op=nft_register_rule pid=3932 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 116.322876] audit: type=1300 audit(1781049931.690:475): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff635f3f0 a2=0 a3=1 items=0 ppid=3664 pid=3932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.331034] audit: type=1327 audit(1781049931.690:475): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 116.335807] audit: type=1325 audit(1781049931.697:476): table=nat:106 family=2 entries=12 op=nft_register_rule pid=3932 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 123.822922] kauditd_printk_skb: 64 callbacks suppressed [ 123.822928] audit: type=1334 audit(1781049939.197:499): prog-id=143 op=LOAD [ 123.825409] audit: type=1334 audit(1781049939.197:500): prog-id=144 op=LOAD [ 123.827649] audit: type=1300 audit(1781049939.197:500): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000178190 a2=98 a3=0 items=0 ppid=3950 pid=4122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.835688] audit: type=1327 audit(1781049939.197:500): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362626234343635373239373366646531353637363066636331373436 [ 123.843710] audit: type=1334 audit(1781049939.200:501): prog-id=144 op=UNLOAD [ 123.845630] audit: type=1300 audit(1781049939.200:501): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3950 pid=4122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.853637] audit: type=1327 audit(1781049939.200:501): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362626234343635373239373366646531353637363066636331373436 [ 123.861644] audit: type=1334 audit(1781049939.200:502): prog-id=145 op=LOAD [ 123.863901] audit: type=1300 audit(1781049939.200:502): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001783f8 a2=98 a3=0 items=0 ppid=3950 pid=4122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 123.873530] audit: type=1327 audit(1781049939.200:502): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362626234343635373239373366646531353637363066636331373436 [ 134.425425] kauditd_printk_skb: 28 callbacks suppressed [ 134.425431] audit: type=1334 audit(1781049949.799:513): prog-id=151 op=LOAD [ 134.429206] audit: type=1300 audit(1781049949.799:513): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=40001783f8 a2=98 a3=0 items=0 ppid=3999 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.435473] audit: type=1327 audit(1781049949.799:513): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664363066366636316532653331643830383235383862323433346262 [ 134.442142] audit: type=1334 audit(1781049949.802:514): prog-id=152 op=LOAD [ 134.443664] audit: type=1300 audit(1781049949.802:514): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000178178 a2=98 a3=0 items=0 ppid=3999 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.449250] audit: type=1327 audit(1781049949.802:514): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664363066366636316532653331643830383235383862323433346262 [ 134.455132] audit: type=1334 audit(1781049949.803:515): prog-id=152 op=UNLOAD [ 134.457061] audit: type=1300 audit(1781049949.803:515): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3999 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.463140] audit: type=1327 audit(1781049949.803:515): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664363066366636316532653331643830383235383862323433346262 [ 134.470703] audit: type=1334 audit(1781049949.803:516): prog-id=151 op=UNLOAD [ 141.011822] kauditd_printk_skb: 21 callbacks suppressed [ 141.011827] audit: type=1325 audit(1781049956.385:524): table=filter:113 family=2 entries=21 op=nft_register_rule pid=4344 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 141.017725] audit: type=1300 audit(1781049956.385:524): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff448cef0 a2=0 a3=1 items=0 ppid=3664 pid=4344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.024783] audit: type=1327 audit(1781049956.385:524): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 141.027419] audit: type=1325 audit(1781049956.399:525): table=nat:114 family=2 entries=19 op=nft_register_chain pid=4344 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 141.030670] audit: type=1300 audit(1781049956.399:525): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff448cef0 a2=0 a3=1 items=0 ppid=3664 pid=4344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.038638] audit: type=1327 audit(1781049956.399:525): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 141.098627] audit: type=1334 audit(1781049956.472:526): prog-id=156 op=UNLOAD [ 142.636907] audit: type=1334 audit(1781049958.011:527): prog-id=157 op=LOAD [ 142.639633] audit: type=1300 audit(1781049958.011:527): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=40001303f8 a2=98 a3=0 items=0 ppid=3999 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.645649] audit: type=1327 audit(1781049958.011:527): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232323963313164393538643837633161646139333363653038383030 [ 146.121856] kauditd_printk_skb: 112 callbacks suppressed [ 146.121861] audit: type=1334 audit(1781049961.496:566): prog-id=178 op=LOAD [ 146.125705] audit: type=1300 audit(1781049961.496:566): arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdc266068 a2=94 a3=ffffdc266098 items=0 ppid=4755 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.131863] audit: type=1327 audit(1781049961.496:566): proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E [ 146.134148] audit: type=1334 audit(1781049961.499:567): prog-id=178 op=UNLOAD [ 146.135704] audit: type=1300 audit(1781049961.499:567): arch=c00000b7 syscall=57 success=yes exit=0 a0=4 a1=57156c a2=94 a3=ffffdc266098 items=0 ppid=4755 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.141803] audit: type=1327 audit(1781049961.499:567): proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E [ 146.160817] audit: type=1334 audit(1781049961.534:568): prog-id=179 op=LOAD [ 146.162805] audit: type=1300 audit(1781049961.534:568): arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffdc266078 a2=94 a3=4 items=0 ppid=4755 pid=4867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 146.168741] audit: type=1327 audit(1781049961.534:568): proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E [ 146.171461] audit: type=1334 audit(1781049961.534:569): prog-id=179 op=UNLOAD This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:02 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:02 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 ip-172-31-26-247 login: This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:03 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:03 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 ip-172-31-26-247 login: This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:04 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:04 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 ip-172-31-26-247 login: [ 151.127989] kauditd_printk_skb: 202 callbacks suppressed [ 151.127995] audit: type=1325 audit(1781049966.502:638): table=nat:121 family=2 entries=21 op=nft_register_chain pid=5038 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 151.134730] audit: type=1300 audit(1781049966.502:638): arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffda5d5d60 a2=0 a3=1 items=0 ppid=3664 pid=5038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.143864] audit: type=1327 audit(1781049966.502:638): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 153.880987] audit: type=1325 audit(1781049969.251:639): table=filter:122 family=2 entries=36 op=nft_register_chain pid=5125 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 153.885498] audit: type=1300 audit(1781049969.251:639): arch=c00000b7 syscall=211 success=yes exit=19608 a0=3 a1=ffffca544620 a2=0 a3=ffffa150a7e0 items=0 ppid=4755 pid=5125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.893150] audit: type=1327 audit(1781049969.251:639): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 153.927093] audit: type=1334 audit(1781049969.301:640): prog-id=213 op=LOAD [ 153.930900] audit: type=1334 audit(1781049969.304:641): prog-id=214 op=LOAD [ 153.932264] audit: type=1300 audit(1781049969.304:641): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4000130190 a2=98 a3=0 items=0 ppid=5101 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.939693] audit: type=1327 audit(1781049969.304:641): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938393935323265363235666565313762336166623839643761316466 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:11 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:11 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 ip-172-31-26-247 login: [ 156.191640] kauditd_printk_skb: 21 callbacks suppressed [ 156.191645] audit: type=1325 audit(1781049971.562:649): table=filter:124 family=2 entries=40 op=nft_register_chain pid=5202 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 156.200644] audit: type=1300 audit(1781049971.562:649): arch=c00000b7 syscall=211 success=yes exit=20796 a0=3 a1=ffffc7dfe810 a2=0 a3=ffff7fc127e0 items=0 ppid=4755 pid=5202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.213650] audit: type=1327 audit(1781049971.562:649): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 156.327151] audit: type=1325 audit(1781049971.701:650): table=calico-arp:125 family=3 entries=3 op=nft_register_chain pid=5244 subj=system_u:system_r:kernel_t:s0 comm="nft" [ 156.330999] audit: type=1300 audit(1781049971.701:650): arch=c00000b7 syscall=211 success=yes exit=732 a0=3 a1=ffffcacfe8e8 a2=0 a3=ffff89715b00 items=0 ppid=4755 pid=5244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nft" exe="/usr/sbin/nft" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.343092] audit: type=1327 audit(1781049971.701:650): proctitle=2F7573722F7362696E2F6E6674002D66002D [ 156.523212] audit: type=1334 audit(1781049971.895:651): prog-id=218 op=LOAD [ 156.526611] audit: type=1334 audit(1781049971.900:652): prog-id=219 op=LOAD [ 156.527957] audit: type=1300 audit(1781049971.900:652): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000106190 a2=98 a3=0 items=0 ppid=5214 pid=5226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.541271] audit: type=1327 audit(1781049971.900:652): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564386536373961636330386230623061373562663437623166346532 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:13 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:13 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 ip-172-31-26-247 login: This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:14 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:14 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 ip-172-31-26-247 login: This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:15 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:15 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 ip-172-31-26-247 login: This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:16 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:16 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 ip-172-31-26-247 login: [ 161.435496] kauditd_printk_skb: 202 callbacks suppressed [ 161.435501] audit: type=1325 audit(1781049976.809:725): table=filter:136 family=2 entries=12 op=nft_register_rule pid=5754 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 161.441238] audit: type=1300 audit(1781049976.809:725): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd5e5b740 a2=0 a3=1 items=0 ppid=3664 pid=5754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.450520] audit: type=1327 audit(1781049976.809:725): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 161.456467] audit: type=1325 audit(1781049976.824:726): table=nat:137 family=2 entries=46 op=nft_register_rule pid=5754 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 161.462917] audit: type=1300 audit(1781049976.824:726): arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffd5e5b740 a2=0 a3=1 items=0 ppid=3664 pid=5754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.471916] audit: type=1327 audit(1781049976.824:726): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 161.910835] audit: type=1334 audit(1781049977.285:727): prog-id=258 op=LOAD [ 161.913368] audit: type=1334 audit(1781049977.287:728): prog-id=259 op=LOAD [ 161.914876] audit: type=1300 audit(1781049977.287:728): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000130190 a2=98 a3=0 items=0 ppid=5101 pid=5757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.920801] audit: type=1327 audit(1781049977.287:728): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730626662303236356265666339386464636261373764363539396633 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:17 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 This is ip-172-31-26-247 (Linux aarch64 6.12.92-flatcar) 00:06:17 SSH host key: SHA256:QuF/5S33MoDdeBstAcJ+J4lShFxEIyEI0f+awF6u2Vo (RSA) SSH host key: SHA256:9gW6ounoXatoW5mmm6YelVPumjNRnlkGh0YtrR3BZvU (ED25519) SSH host key: SHA256:ajACbzjmEhThNHZh8KKLC6AdneD0iRvJduysvkNL+ic (ECDSA) eth0: 172.31.26.247 fe80::475:b2ff:fe63:2da3 ip-172-31-26-247 login: [ 166.936004] kauditd_printk_skb: 39 callbacks suppressed [ 166.936010] audit: type=1334 audit(1781049982.310:742): prog-id=266 op=LOAD [ 166.939326] audit: type=1334 audit(1781049982.313:743): prog-id=267 op=LOAD [ 166.940934] audit: type=1300 audit(1781049982.313:743): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4000138190 a2=98 a3=0 items=0 ppid=5427 pid=5907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.946368] audit: type=1327 audit(1781049982.313:743): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537363462306633306633306137636538323337323164616233386563 [ 166.951860] audit: type=1334 audit(1781049982.313:744): prog-id=267 op=UNLOAD [ 166.953283] audit: type=1300 audit(1781049982.313:744): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5427 pid=5907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.959077] audit: type=1327 audit(1781049982.313:744): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537363462306633306633306137636538323337323164616233386563 [ 166.964748] audit: type=1334 audit(1781049982.313:745): prog-id=268 op=LOAD [ 166.966410] audit: type=1300 audit(1781049982.313:745): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=40001383f8 a2=98 a3=0 items=0 ppid=5427 pid=5907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.971998] audit: type=1327 audit(1781049982.313:745): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537363462306633306633306137636538323337323164616233386563 [ 172.515772] kauditd_printk_skb: 68 callbacks suppressed [ 172.515779] audit: type=1325 audit(1781049987.889:770): table=filter:144 family=2 entries=12 op=nft_register_rule pid=6106 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 172.522678] audit: type=1300 audit(1781049987.889:770): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff8b99600 a2=0 a3=1 items=0 ppid=3664 pid=6106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.531469] audit: type=1327 audit(1781049987.889:770): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 172.535389] audit: type=1325 audit(1781049987.909:771): table=nat:145 family=2 entries=22 op=nft_register_rule pid=6106 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 172.539101] audit: type=1300 audit(1781049987.909:771): arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=fffff8b99600 a2=0 a3=1 items=0 ppid=3664 pid=6106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.546500] audit: type=1327 audit(1781049987.909:771): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 173.596372] audit: type=1334 audit(1781049988.969:772): prog-id=281 op=LOAD [ 173.598901] audit: type=1300 audit(1781049988.969:772): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=40001a83f8 a2=98 a3=0 items=0 ppid=5214 pid=6111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.605122] audit: type=1327 audit(1781049988.969:772): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536666334653230353133616362373430343931626665313137303139 [ 173.611443] audit: type=1334 audit(1781049988.970:773): prog-id=282 op=LOAD [ 177.532009] kauditd_printk_skb: 25 callbacks suppressed [ 177.532015] audit: type=1106 audit(1781049992.906:785): pid=6183 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 177.546646] audit: type=1104 audit(1781049992.906:786): pid=6183 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 177.555893] audit: type=1131 audit(1781049992.921:787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-3-172.31.26.247:22-20.229.252.112:43484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.708709] audit: type=1130 audit(1781049998.081:788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4102-172.31.26.247:22-20.229.252.112:52124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 183.607715] audit: type=1101 audit(1781049998.982:789): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 183.615734] audit: type=1103 audit(1781049998.989:790): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 183.621253] audit: type=1006 audit(1781049998.989:791): pid=6231 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 183.625900] audit: type=1300 audit(1781049998.989:791): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff41fdbc0 a2=3 a3=0 items=0 ppid=1 pid=6231 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 183.631681] audit: type=1327 audit(1781049998.989:791): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 183.648933] audit: type=1105 audit(1781049999.023:792): pid=6231 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 183.657132] audit: type=1103 audit(1781049999.031:793): pid=6235 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.223649] audit: type=1106 audit(1781049999.596:794): pid=6231 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 184.235633] audit: type=1104 audit(1781049999.596:795): pid=6231 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 189.395289] kauditd_printk_skb: 1 callbacks suppressed [ 189.395295] audit: type=1130 audit(1781050004.769:797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4-172.31.26.247:22-20.229.252.112:52140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.276125] audit: type=1101 audit(1781050005.650:798): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.283161] audit: type=1103 audit(1781050005.657:799): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.289794] audit: type=1006 audit(1781050005.657:800): pid=6262 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 190.294360] audit: type=1300 audit(1781050005.657:800): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff619f3d0 a2=3 a3=0 items=0 ppid=1 pid=6262 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.301164] audit: type=1327 audit(1781050005.657:800): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 190.323201] audit: type=1105 audit(1781050005.697:801): pid=6262 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.331438] audit: type=1103 audit(1781050005.705:802): pid=6266 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.964732] audit: type=1106 audit(1781050006.338:803): pid=6262 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 190.971663] audit: type=1104 audit(1781050006.338:804): pid=6262 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 195.520221] kauditd_printk_skb: 1 callbacks suppressed [ 195.520227] audit: type=1325 audit(1781050010.894:806): table=filter:148 family=2 entries=10 op=nft_register_rule pid=6302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 195.524884] audit: type=1300 audit(1781050010.894:806): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff7370160 a2=0 a3=1 items=0 ppid=3664 pid=6302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.530928] audit: type=1327 audit(1781050010.894:806): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 195.533514] audit: type=1325 audit(1781050010.899:807): table=nat:149 family=2 entries=36 op=nft_register_chain pid=6302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 195.536369] audit: type=1300 audit(1781050010.899:807): arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffff7370160 a2=0 a3=1 items=0 ppid=3664 pid=6302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.542676] audit: type=1327 audit(1781050010.899:807): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 196.132451] audit: type=1130 audit(1781050011.506:808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4103-172.31.26.247:22-20.229.252.112:49586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.007084] audit: type=1101 audit(1781050012.381:809): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.014229] audit: type=1103 audit(1781050012.387:810): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.021830] audit: type=1006 audit(1781050012.388:811): pid=6304 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 200.641412] kauditd_printk_skb: 40 callbacks suppressed [ 200.641417] audit: type=1101 audit(1781050016.015:834): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 200.649225] audit: type=1103 audit(1781050016.023:835): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 200.654538] audit: type=1006 audit(1781050016.023:836): pid=6418 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 200.658909] audit: type=1300 audit(1781050016.023:836): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff63f81a0 a2=3 a3=0 items=0 ppid=1 pid=6418 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.664967] audit: type=1327 audit(1781050016.023:836): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 200.688351] audit: type=1105 audit(1781050016.062:837): pid=6418 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 200.695539] audit: type=1103 audit(1781050016.069:838): pid=6439 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 201.260372] audit: type=1106 audit(1781050016.634:839): pid=6418 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 201.267179] audit: type=1104 audit(1781050016.636:840): pid=6418 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 201.272872] audit: type=1131 audit(1781050016.643:841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-5-172.31.26.247:22-20.229.252.112:49614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.441676] audit: type=1130 audit(1781050021.815:842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-6-172.31.26.247:22-20.229.252.112:43660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 207.332127] audit: type=1101 audit(1781050022.706:843): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 207.340047] audit: type=1103 audit(1781050022.714:844): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 207.345160] audit: type=1006 audit(1781050022.714:845): pid=6484 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 207.349484] audit: type=1300 audit(1781050022.714:845): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc05ad140 a2=3 a3=0 items=0 ppid=1 pid=6484 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.355321] audit: type=1327 audit(1781050022.714:845): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 207.371554] audit: type=1105 audit(1781050022.745:846): pid=6484 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 207.378140] audit: type=1103 audit(1781050022.749:847): pid=6488 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 207.953540] audit: type=1106 audit(1781050023.326:848): pid=6484 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 207.961998] audit: type=1104 audit(1781050023.327:849): pid=6484 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 211.446331] kauditd_printk_skb: 11 callbacks suppressed [ 211.446336] audit: type=1131 audit(1781050026.820:859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-7-172.31.26.247:22-20.229.252.112:43668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.609644] audit: type=1130 audit(1781050026.983:860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4105-172.31.26.247:22-20.229.252.112:43678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 212.493259] audit: type=1101 audit(1781050027.867:861): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 212.505681] audit: type=1103 audit(1781050027.876:862): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 212.512313] audit: type=1006 audit(1781050027.876:863): pid=6551 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 212.515976] audit: type=1300 audit(1781050027.876:863): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe5631f10 a2=3 a3=0 items=0 ppid=1 pid=6551 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 212.522414] audit: type=1327 audit(1781050027.876:863): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 212.544655] audit: type=1105 audit(1781050027.918:864): pid=6551 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 212.552292] audit: type=1103 audit(1781050027.926:865): pid=6555 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 214.314658] audit: type=1325 audit(1781050029.688:866): table=filter:157 family=2 entries=20 op=nft_register_rule pid=6575 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 216.534945] kauditd_printk_skb: 25 callbacks suppressed [ 216.534951] audit: type=1130 audit(1781050031.909:882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4107-172.31.26.247:22-20.229.252.112:51794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 217.408495] audit: type=1101 audit(1781050032.782:883): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.415646] audit: type=1103 audit(1781050032.789:884): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.421174] audit: type=1006 audit(1781050032.790:885): pid=6599 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 217.424752] audit: type=1300 audit(1781050032.790:885): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc0257300 a2=3 a3=0 items=0 ppid=1 pid=6599 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 217.432145] audit: type=1327 audit(1781050032.790:885): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 217.454656] audit: type=1105 audit(1781050032.828:886): pid=6599 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.461874] audit: type=1103 audit(1781050032.832:887): pid=6603 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 218.015635] audit: type=1106 audit(1781050033.389:888): pid=6599 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 218.022633] audit: type=1104 audit(1781050033.389:889): pid=6599 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 222.056401] kauditd_printk_skb: 1 callbacks suppressed [ 222.056407] audit: type=1325 audit(1781050037.430:891): table=filter:161 family=2 entries=20 op=nft_register_rule pid=6627 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 222.061425] audit: type=1300 audit(1781050037.430:891): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc21b09b0 a2=0 a3=1 items=0 ppid=3664 pid=6627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 222.070366] audit: type=1327 audit(1781050037.430:891): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 222.079089] audit: type=1325 audit(1781050037.452:892): table=nat:162 family=2 entries=110 op=nft_register_chain pid=6627 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 222.082329] audit: type=1300 audit(1781050037.452:892): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffc21b09b0 a2=0 a3=1 items=0 ppid=3664 pid=6627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 222.088660] audit: type=1327 audit(1781050037.452:892): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 223.192103] audit: type=1130 audit(1781050038.565:893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4108-172.31.26.247:22-20.229.252.112:52374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 224.095319] audit: type=1101 audit(1781050039.469:894): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 224.103091] audit: type=1103 audit(1781050039.477:895): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 224.108381] audit: type=1006 audit(1781050039.477:896): pid=6629 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 229.889286] kauditd_printk_skb: 7 callbacks suppressed [ 229.889291] audit: type=1130 audit(1781050045.263:902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-8-172.31.26.247:22-20.229.252.112:52382 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 230.767098] audit: type=1101 audit(1781050046.141:903): pid=6706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 230.775000] audit: type=1103 audit(1781050046.149:904): pid=6706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 230.780471] audit: type=1006 audit(1781050046.149:905): pid=6706 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 230.784043] audit: type=1300 audit(1781050046.149:905): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff88b8fe0 a2=3 a3=0 items=0 ppid=1 pid=6706 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 230.791368] audit: type=1327 audit(1781050046.149:905): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 230.814954] audit: type=1105 audit(1781050046.189:906): pid=6706 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 230.821285] audit: type=1103 audit(1781050046.189:907): pid=6710 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 231.373712] audit: type=1106 audit(1781050046.748:908): pid=6706 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 231.386968] audit: type=1104 audit(1781050046.748:909): pid=6706 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 236.543793] kauditd_printk_skb: 1 callbacks suppressed [ 236.543799] audit: type=1130 audit(1781050051.918:911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4109-172.31.26.247:22-20.229.252.112:48962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 237.417303] audit: type=1101 audit(1781050052.791:912): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 237.424217] audit: type=1103 audit(1781050052.798:913): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 237.430339] audit: type=1006 audit(1781050052.798:914): pid=6749 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 237.435676] audit: type=1300 audit(1781050052.798:914): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe5ae8790 a2=3 a3=0 items=0 ppid=1 pid=6749 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 237.441396] audit: type=1327 audit(1781050052.798:914): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 237.455991] audit: type=1105 audit(1781050052.829:915): pid=6749 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 237.464528] audit: type=1103 audit(1781050052.838:916): pid=6773 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 238.027641] audit: type=1106 audit(1781050053.401:917): pid=6749 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 238.035850] audit: type=1104 audit(1781050053.402:918): pid=6749 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 243.202345] kauditd_printk_skb: 1 callbacks suppressed [ 243.202351] audit: type=1130 audit(1781050058.576:920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-9-172.31.26.247:22-20.229.252.112:44504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 244.096862] audit: type=1101 audit(1781050059.471:921): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 244.103850] audit: type=1103 audit(1781050059.478:922): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 244.109343] audit: type=1006 audit(1781050059.478:923): pid=6838 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 244.113370] audit: type=1300 audit(1781050059.478:923): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff613b670 a2=3 a3=0 items=0 ppid=1 pid=6838 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 244.120009] audit: type=1327 audit(1781050059.478:923): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 244.140783] audit: type=1105 audit(1781050059.515:924): pid=6838 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 244.148499] audit: type=1103 audit(1781050059.522:925): pid=6842 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 244.742678] audit: type=1106 audit(1781050060.116:926): pid=6838 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 244.761874] audit: type=1104 audit(1781050060.116:927): pid=6838 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'