=120 op=LOAD [ 78.943704] audit: type=1300 audit(1781539624.145:400): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=a98e75aa288 a2=98 a3=0 items=0 ppid=4053 pid=4064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 78.955693] audit: type=1327 audit(1781539624.145:400): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363336365373262316436653739656538376434386531653566373662 [ 84.751657] kauditd_printk_skb: 202 callbacks suppressed [ 84.751661] audit: type=1334 audit(1781539629.983:469): prog-id=131 op=LOAD [ 84.754255] audit: type=1334 audit(1781539629.984:470): prog-id=132 op=LOAD [ 84.755751] audit: type=1300 audit(1781539629.984:470): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=5cc3fda3fd0 a2=98 a3=0 items=0 ppid=4129 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.763005] audit: type=1327 audit(1781539629.984:470): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764643238323737356333373033343563333665353130376231393538 [ 84.769302] audit: type=1334 audit(1781539629.984:471): prog-id=132 op=UNLOAD [ 84.771525] audit: type=1300 audit(1781539629.984:471): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4129 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.777974] audit: type=1327 audit(1781539629.984:471): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764643238323737356333373033343563333665353130376231393538 [ 84.793114] audit: type=1334 audit(1781539629.984:472): prog-id=133 op=LOAD [ 84.796019] audit: type=1300 audit(1781539629.984:472): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=5cc3fda4288 a2=98 a3=0 items=0 ppid=4129 pid=4308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 84.803073] audit: type=1327 audit(1781539629.984:472): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764643238323737356333373033343563333665353130376231393538 [ 92.838028] kauditd_printk_skb: 12 callbacks suppressed [ 92.838032] audit: type=1106 audit(1781539638.068:477): pid=2727 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 92.845022] audit: type=1104 audit(1781539638.068:478): pid=2727 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 92.998687] audit: type=1106 audit(1781539638.230:479): pid=2722 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 93.012373] audit: type=1104 audit(1781539638.230:480): pid=2722 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 93.022891] audit: type=1131 audit(1781539638.233:481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4100-172.31.31.9:22-20.229.252.112:55982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 95.225418] audit: type=1325 audit(1781539640.457:482): table=filter:103 family=2 entries=16 op=nft_register_rule pid=4392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 95.230230] audit: type=1300 audit(1781539640.457:482): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc55d4d9e0 a2=0 a3=7ffc55d4d9cc items=0 ppid=4105 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.240415] audit: type=1327 audit(1781539640.457:482): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 95.244573] audit: type=1325 audit(1781539640.464:483): table=nat:104 family=2 entries=12 op=nft_register_rule pid=4392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 95.249100] audit: type=1300 audit(1781539640.464:483): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc55d4d9e0 a2=0 a3=0 items=0 ppid=4105 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.926419] kauditd_printk_skb: 57 callbacks suppressed [ 98.926423] audit: type=1334 audit(1781539644.158:504): prog-id=146 op=LOAD [ 98.929453] audit: type=1300 audit(1781539644.158:504): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=25146c338288 a2=98 a3=0 items=0 ppid=4442 pid=4572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.936071] audit: type=1327 audit(1781539644.158:504): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863343136303736396436306638323030313264623237393731366433 [ 98.942357] audit: type=1334 audit(1781539644.158:505): prog-id=147 op=LOAD [ 98.943969] audit: type=1300 audit(1781539644.158:505): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=25146c337fe0 a2=98 a3=0 items=0 ppid=4442 pid=4572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.950797] audit: type=1327 audit(1781539644.158:505): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863343136303736396436306638323030313264623237393731366433 [ 98.956705] audit: type=1334 audit(1781539644.158:506): prog-id=147 op=UNLOAD [ 98.958385] audit: type=1300 audit(1781539644.158:506): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4442 pid=4572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 98.964509] audit: type=1327 audit(1781539644.158:506): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863343136303736396436306638323030313264623237393731366433 [ 98.970659] audit: type=1334 audit(1781539644.158:507): prog-id=146 op=UNLOAD [ 111.493064] kauditd_printk_skb: 28 callbacks suppressed [ 111.493067] audit: type=1334 audit(1781539656.725:518): prog-id=154 op=LOAD [ 111.496046] audit: type=1300 audit(1781539656.725:518): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=cc8e4ba4288 a2=98 a3=0 items=0 ppid=4442 pid=4672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.501567] audit: type=1327 audit(1781539656.725:518): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532353565346463333862316561613136353362343463313861373638 [ 111.509432] audit: type=1334 audit(1781539656.728:519): prog-id=155 op=LOAD [ 111.511025] audit: type=1300 audit(1781539656.728:519): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=cc8e4ba3fe0 a2=98 a3=0 items=0 ppid=4442 pid=4672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.517166] audit: type=1327 audit(1781539656.728:519): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532353565346463333862316561613136353362343463313861373638 [ 111.523314] audit: type=1334 audit(1781539656.728:520): prog-id=155 op=UNLOAD [ 111.527986] audit: type=1300 audit(1781539656.728:520): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4442 pid=4672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.534225] audit: type=1327 audit(1781539656.728:520): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532353565346463333862316561613136353362343463313861373638 [ 111.540486] audit: type=1334 audit(1781539656.728:521): prog-id=154 op=UNLOAD [ 116.799973] kauditd_printk_skb: 6 callbacks suppressed [ 116.799977] audit: type=1334 audit(1781539662.032:524): prog-id=157 op=LOAD [ 116.802882] audit: type=1300 audit(1781539662.032:524): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=def8abb8288 a2=98 a3=0 items=0 ppid=4442 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.808540] audit: type=1327 audit(1781539662.032:524): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538623634666535383333636462363465613039356635663866363739 [ 116.814240] audit: type=1334 audit(1781539662.033:525): prog-id=158 op=LOAD [ 116.816404] audit: type=1300 audit(1781539662.033:525): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=def8abb7fe0 a2=98 a3=0 items=0 ppid=4442 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.826895] audit: type=1327 audit(1781539662.033:525): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538623634666535383333636462363465613039356635663866363739 [ 116.833193] audit: type=1334 audit(1781539662.033:526): prog-id=158 op=UNLOAD [ 116.834725] audit: type=1300 audit(1781539662.033:526): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4442 pid=4729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 116.840537] audit: type=1327 audit(1781539662.033:526): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538623634666535383333636462363465613039356635663866363739 [ 116.846464] audit: type=1334 audit(1781539662.034:527): prog-id=157 op=UNLOAD [ 122.223536] kauditd_printk_skb: 49 callbacks suppressed [ 122.223540] audit: type=1334 audit(1781539667.455:545): prog-id=168 op=LOAD [ 122.226663] audit: type=1300 audit(1781539667.455:545): arch=c000003e syscall=321 success=yes exit=13 a0=5 a1=7ffd855ed570 a2=94 a3=589152c items=0 ppid=5155 pid=5161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.237484] audit: type=1327 audit(1781539667.455:545): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 122.240952] audit: type=1334 audit(1781539667.455:546): prog-id=168 op=UNLOAD [ 122.242976] audit: type=1300 audit(1781539667.455:546): arch=c000003e syscall=3 success=yes exit=0 a0=d a1=2 a2=2 a3=589152c items=0 ppid=5155 pid=5161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.255379] audit: type=1327 audit(1781539667.455:546): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 122.260528] audit: type=1334 audit(1781539667.455:547): prog-id=169 op=LOAD [ 122.263331] audit: type=1300 audit(1781539667.455:547): arch=c000003e syscall=321 success=yes exit=13 a0=5 a1=7ffd855ed5a0 a2=98 a3=2 items=0 ppid=5155 pid=5161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.274434] audit: type=1327 audit(1781539667.455:547): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 122.278946] audit: type=1334 audit(1781539667.455:548): prog-id=169 op=UNLOAD This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:07:48 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:07:48 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 ip-172-31-31-9 login: This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:07:50 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:07:50 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 ip-172-31-31-9 login: This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:07:51 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:07:51 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 ip-172-31-31-9 login: This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:07:52 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:07:52 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 ip-172-31-31-9 login: [ 128.326390] kauditd_printk_skb: 292 callbacks suppressed [ 128.326394] audit: type=1334 audit(1781539673.558:647): prog-id=219 op=LOAD [ 128.329639] audit: type=1300 audit(1781539673.558:647): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=298bd6e1c288 a2=98 a3=0 items=0 ppid=5113 pid=5514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.335533] audit: type=1327 audit(1781539673.558:647): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463373164363365633065336339626131646235366333383237653263 [ 128.346385] audit: type=1334 audit(1781539673.558:648): prog-id=220 op=LOAD [ 128.349985] audit: type=1300 audit(1781539673.558:648): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=298bd6e1bfe0 a2=98 a3=0 items=0 ppid=5113 pid=5514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.356043] audit: type=1327 audit(1781539673.558:648): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463373164363365633065336339626131646235366333383237653263 [ 128.362133] audit: type=1334 audit(1781539673.558:649): prog-id=220 op=UNLOAD [ 128.363633] audit: type=1300 audit(1781539673.558:649): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5113 pid=5514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.369712] audit: type=1327 audit(1781539673.558:649): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463373164363365633065336339626131646235366333383237653263 [ 128.375582] audit: type=1334 audit(1781539673.558:650): prog-id=219 op=UNLOAD [ 133.636527] kauditd_printk_skb: 161 callbacks suppressed [ 133.636530] audit: type=1325 audit(1781539678.868:708): table=filter:124 family=2 entries=16 op=nft_register_rule pid=5962 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.641788] audit: type=1300 audit(1781539678.868:708): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff75bd4b30 a2=0 a3=7fff75bd4b1c items=0 ppid=4105 pid=5962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.647620] audit: type=1327 audit(1781539678.868:708): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 133.655424] audit: type=1325 audit(1781539678.886:709): table=filter:125 family=2 entries=44 op=nft_register_chain pid=5963 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 133.659899] audit: type=1300 audit(1781539678.886:709): arch=c000003e syscall=46 success=yes exit=21952 a0=3 a1=7ffe7366ec10 a2=0 a3=7ffe7366ebfc items=0 ppid=5161 pid=5963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.666652] audit: type=1327 audit(1781539678.886:709): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 133.681207] audit: type=1325 audit(1781539678.912:710): table=nat:126 family=2 entries=54 op=nft_register_chain pid=5962 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.685564] audit: type=1300 audit(1781539678.912:710): arch=c000003e syscall=46 success=yes exit=23436 a0=3 a1=7fff75bd4b30 a2=0 a3=7fff75bd4b1c items=0 ppid=4105 pid=5962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.692096] audit: type=1327 audit(1781539678.912:710): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 133.732982] audit: type=1325 audit(1781539678.965:711): table=calico-arp:127 family=3 entries=3 op=nft_register_chain pid=5993 subj=system_u:system_r:kernel_t:s0 comm="nft" This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:07:59 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:07:59 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 ip-172-31-31-9 login: This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:08:00 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:08:00 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 ip-172-31-31-9 login: This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:08:01 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:08:01 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 ip-172-31-31-9 login: This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:08:02 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:08:02 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 ip-172-31-31-9 login: This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:08:03 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 This is ip-172-31-31-9 (Linux x86_64 6.12.93-flatcar) 16:08:03 SSH host key: SHA256:uJfj8AupUD0RKRYHoeO82qieGQp+74yTwwKrPL3t3SU (ECDSA) SSH host key: SHA256:0suZbpILq3jJuTawg3iFfPm6U8/s2esZO1S/aXRcyhs (RSA) SSH host key: SHA256:oWwG17Xi7nuWCcbRZ4T5DyJM3HaNA4OJE9x8S9EjIqo (ED25519) eth0: 172.31.31.9 fe80::4d4:afff:fe31:b7b1 ip-172-31-31-9 login: [ 141.974714] kauditd_printk_skb: 108 callbacks suppressed [ 141.974718] audit: type=1334 audit(1781539687.205:750): prog-id=272 op=LOAD [ 141.977422] audit: type=1334 audit(1781539687.206:751): prog-id=273 op=LOAD [ 141.980462] audit: type=1300 audit(1781539687.206:751): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=281b1cc37fd0 a2=98 a3=0 items=0 ppid=5975 pid=6333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.986444] audit: type=1327 audit(1781539687.206:751): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062393037386562643633326439616438306531613730623933633735 [ 141.993677] audit: type=1334 audit(1781539687.206:752): prog-id=273 op=UNLOAD [ 141.996988] audit: type=1300 audit(1781539687.206:752): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5975 pid=6333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.004196] audit: type=1327 audit(1781539687.206:752): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062393037386562643633326439616438306531613730623933633735 [ 142.011455] audit: type=1334 audit(1781539687.206:753): prog-id=274 op=LOAD [ 142.013920] audit: type=1300 audit(1781539687.206:753): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=281b1cc38288 a2=98 a3=0 items=0 ppid=5975 pid=6333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.020097] audit: type=1327 audit(1781539687.206:753): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062393037386562643633326439616438306531613730623933633735 [ 148.785605] kauditd_printk_skb: 46 callbacks suppressed [ 148.785610] audit: type=1334 audit(1781539694.017:770): prog-id=282 op=LOAD [ 148.788223] audit: type=1334 audit(1781539694.018:771): prog-id=283 op=LOAD [ 148.790294] audit: type=1300 audit(1781539694.018:771): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=60c5e427fd0 a2=98 a3=0 items=0 ppid=6155 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.796428] audit: type=1327 audit(1781539694.018:771): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135613665613033646239663566396431346665396132383663646238 [ 148.802693] audit: type=1334 audit(1781539694.018:772): prog-id=283 op=UNLOAD [ 148.804576] audit: type=1300 audit(1781539694.018:772): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=6155 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.810641] audit: type=1327 audit(1781539694.018:772): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135613665613033646239663566396431346665396132383663646238 [ 148.816972] audit: type=1334 audit(1781539694.018:773): prog-id=284 op=LOAD [ 148.818581] audit: type=1300 audit(1781539694.018:773): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=60c5e428288 a2=98 a3=0 items=0 ppid=6155 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.825235] audit: type=1327 audit(1781539694.018:773): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135613665613033646239663566396431346665396132383663646238 [ 154.031865] kauditd_printk_skb: 12 callbacks suppressed [ 154.031869] audit: type=1130 audit(1781539699.263:778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4101-172.31.31.9:22-20.229.252.112:32846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 155.121452] audit: type=1101 audit(1781539700.353:779): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 155.127362] audit: type=1103 audit(1781539700.355:780): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 155.139760] audit: type=1006 audit(1781539700.355:781): pid=6538 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 155.144569] audit: type=1300 audit(1781539700.355:781): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffefc2c8430 a2=3 a3=0 items=0 ppid=1 pid=6538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.152258] audit: type=1327 audit(1781539700.355:781): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 155.190286] audit: type=1105 audit(1781539700.421:782): pid=6538 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 155.206551] audit: type=1103 audit(1781539700.431:783): pid=6546 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.456806] audit: type=1106 audit(1781539701.688:784): pid=6538 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 156.472420] audit: type=1104 audit(1781539701.696:785): pid=6538 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 161.621252] kauditd_printk_skb: 1 callbacks suppressed [ 161.621256] audit: type=1130 audit(1781539706.853:787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4-172.31.31.9:22-20.229.252.112:32854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 162.528634] audit: type=1101 audit(1781539707.760:788): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.535554] audit: type=1103 audit(1781539707.760:789): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.541668] audit: type=1006 audit(1781539707.760:790): pid=6565 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 162.544999] audit: type=1300 audit(1781539707.760:790): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffea84bdb0 a2=3 a3=0 items=0 ppid=1 pid=6565 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.551225] audit: type=1327 audit(1781539707.760:790): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 162.561213] audit: type=1105 audit(1781539707.793:791): pid=6565 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 162.572884] audit: type=1103 audit(1781539707.804:792): pid=6569 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 163.243096] audit: type=1106 audit(1781539708.475:793): pid=6565 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 163.249500] audit: type=1104 audit(1781539708.477:794): pid=6565 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 168.411941] kauditd_printk_skb: 7 callbacks suppressed [ 168.411946] audit: type=1130 audit(1781539713.643:798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-5-172.31.31.9:22-20.229.252.112:59470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 169.374865] audit: type=1101 audit(1781539714.606:799): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 169.385513] audit: type=1103 audit(1781539714.614:800): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 169.401795] audit: type=1006 audit(1781539714.614:801): pid=6617 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 169.406922] audit: type=1300 audit(1781539714.614:801): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd83c1fee0 a2=3 a3=0 items=0 ppid=1 pid=6617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 169.423943] audit: type=1327 audit(1781539714.614:801): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 169.441838] audit: type=1105 audit(1781539714.673:802): pid=6617 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 169.453830] audit: type=1103 audit(1781539714.681:803): pid=6622 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 170.035891] audit: type=1325 audit(1781539715.267:804): table=filter:140 family=2 entries=9 op=nft_register_rule pid=6658 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 170.040452] audit: type=1300 audit(1781539715.267:804): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc693d8050 a2=0 a3=7ffc693d803c items=0 ppid=4105 pid=6658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.228200] kauditd_printk_skb: 7 callbacks suppressed [ 174.228204] audit: type=1325 audit(1781539719.460:809): table=filter:142 family=2 entries=8 op=nft_register_rule pid=6709 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 174.232596] audit: type=1300 audit(1781539719.460:809): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc538f4ff0 a2=0 a3=7ffc538f4fdc items=0 ppid=4105 pid=6709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.238473] audit: type=1327 audit(1781539719.460:809): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 174.245173] audit: type=1325 audit(1781539719.476:810): table=nat:143 family=2 entries=38 op=nft_register_chain pid=6709 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 174.248379] audit: type=1300 audit(1781539719.476:810): arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffc538f4ff0 a2=0 a3=7ffc538f4fdc items=0 ppid=4105 pid=6709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.254651] audit: type=1327 audit(1781539719.476:810): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 175.222087] audit: type=1130 audit(1781539720.453:811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4102-172.31.31.9:22-20.229.252.112:35046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.663020] audit: type=1325 audit(1781539720.892:812): table=filter:144 family=2 entries=109 op=nft_register_chain pid=6728 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 175.666545] audit: type=1300 audit(1781539720.892:812): arch=c000003e syscall=46 success=yes exit=48476 a0=3 a1=7fff96241ff0 a2=0 a3=7fff96241fdc items=0 ppid=5161 pid=6728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.673190] audit: type=1327 audit(1781539720.892:812): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 179.784094] kauditd_printk_skb: 28 callbacks suppressed [ 179.784098] audit: type=1101 audit(1781539725.016:833): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 179.793420] audit: type=1103 audit(1781539725.020:834): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 179.799244] audit: type=1006 audit(1781539725.020:835): pid=6775 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 179.803228] audit: type=1300 audit(1781539725.020:835): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc07ba7ae0 a2=3 a3=0 items=0 ppid=1 pid=6775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.809498] audit: type=1327 audit(1781539725.020:835): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 179.822848] audit: type=1105 audit(1781539725.054:836): pid=6775 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 179.829956] audit: type=1103 audit(1781539725.058:837): pid=6802 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 180.426854] audit: type=1106 audit(1781539725.657:838): pid=6775 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 180.433186] audit: type=1104 audit(1781539725.657:839): pid=6775 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 180.438506] audit: type=1131 audit(1781539725.664:840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-4104-172.31.31.9:22-20.229.252.112:35070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.595139] kauditd_printk_skb: 3 callbacks suppressed [ 185.595143] audit: type=1130 audit(1781539730.827:842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-6-172.31.31.9:22-20.229.252.112:53968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 186.494911] audit: type=1101 audit(1781539731.727:843): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 186.506844] audit: type=1103 audit(1781539731.738:844): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 186.515963] audit: type=1006 audit(1781539731.738:845): pid=6868 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 186.522838] audit: type=1300 audit(1781539731.738:845): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff1eb8f2e0 a2=3 a3=0 items=0 ppid=1 pid=6868 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 186.529399] audit: type=1327 audit(1781539731.738:845): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 186.549163] audit: type=1105 audit(1781539731.780:846): pid=6868 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 186.559836] audit: type=1103 audit(1781539731.790:847): pid=6879 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 187.315841] audit: type=1106 audit(1781539732.546:848): pid=6868 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 187.323980] audit: type=1104 audit(1781539732.546:849): pid=6868 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 191.936220] kauditd_printk_skb: 20 callbacks suppressed [ 191.936224] audit: type=1325 audit(1781539737.167:866): table=filter:148 family=2 entries=20 op=nft_register_rule pid=6938 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 191.943413] audit: type=1300 audit(1781539737.167:866): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffdb4c2f20 a2=0 a3=7fffdb4c2f0c items=0 ppid=4105 pid=6938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.951216] audit: type=1327 audit(1781539737.167:866): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 191.954703] audit: type=1325 audit(1781539737.178:867): table=nat:149 family=2 entries=26 op=nft_register_rule pid=6938 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 191.957898] audit: type=1300 audit(1781539737.178:867): arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7fffdb4c2f20 a2=0 a3=0 items=0 ppid=4105 pid=6938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.964301] audit: type=1327 audit(1781539737.178:867): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 192.065021] audit: type=1106 audit(1781539737.296:868): pid=6907 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 192.077167] audit: type=1104 audit(1781539737.298:869): pid=6907 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 192.090295] audit: type=1131 audit(1781539737.318:870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4106-172.31.31.9:22-20.229.252.112:53982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 192.232344] audit: type=1130 audit(1781539737.464:871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-7-172.31.31.9:22-20.229.252.112:53996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.036166] kauditd_printk_skb: 24 callbacks suppressed [ 197.036170] audit: type=1106 audit(1781539742.268:888): pid=6961 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.051973] audit: type=1104 audit(1781539742.268:889): pid=6961 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 197.059462] audit: type=1131 audit(1781539742.276:890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4107-172.31.31.9:22-20.229.252.112:56398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.001621] audit: type=1325 audit(1781539743.233:891): table=filter:152 family=2 entries=20 op=nft_register_rule pid=6977 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 198.005030] audit: type=1300 audit(1781539743.233:891): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc590a4c40 a2=0 a3=7ffc590a4c2c items=0 ppid=4105 pid=6977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.011392] audit: type=1327 audit(1781539743.233:891): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 198.013975] audit: type=1325 audit(1781539743.242:892): table=nat:153 family=2 entries=110 op=nft_register_chain pid=6977 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 198.016976] audit: type=1300 audit(1781539743.242:892): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffc590a4c40 a2=0 a3=7ffc590a4c2c items=0 ppid=4105 pid=6977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.023214] audit: type=1327 audit(1781539743.242:892): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 202.197654] audit: type=1130 audit(1781539747.429:893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-8-172.31.31.9:22-20.229.252.112:56400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 203.158614] audit: type=1101 audit(1781539748.390:894): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.165161] audit: type=1103 audit(1781539748.393:895): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.171370] audit: type=1006 audit(1781539748.393:896): pid=7012 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 203.174594] audit: type=1300 audit(1781539748.393:896): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcc3163ee0 a2=3 a3=0 items=0 ppid=1 pid=7012 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.181041] audit: type=1327 audit(1781539748.393:896): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 203.190976] audit: type=1105 audit(1781539748.423:897): pid=7012 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 203.199484] audit: type=1103 audit(1781539748.431:898): pid=7016 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 204.179611] audit: type=1106 audit(1781539749.411:899): pid=7012 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 204.190780] audit: type=1104 audit(1781539749.411:900): pid=7012 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 209.346155] kauditd_printk_skb: 1 callbacks suppressed [ 209.346159] audit: type=1130 audit(1781539754.578:902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-9-172.31.31.9:22-20.229.252.112:37236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 210.227287] audit: type=1101 audit(1781539755.459:903): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 210.237862] audit: type=1103 audit(1781539755.462:904): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 210.244471] audit: type=1006 audit(1781539755.462:905): pid=7039 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 210.248300] audit: type=1300 audit(1781539755.462:905): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd21904a50 a2=3 a3=0 items=0 ppid=1 pid=7039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 210.254774] audit: type=1327 audit(1781539755.462:905): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 210.268830] audit: type=1105 audit(1781539755.500:906): pid=7039 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 210.277938] audit: type=1103 audit(1781539755.505:907): pid=7065 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 211.176860] audit: type=1106 audit(1781539756.409:908): pid=7039 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 211.190388] audit: type=1104 audit(1781539756.416:909): pid=7039 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 216.345410] kauditd_printk_skb: 1 callbacks suppressed [ 216.345414] audit: type=1130 audit(1781539761.577:911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10-172.31.31.9:22-20.229.252.112:43374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 217.305568] audit: type=1101 audit(1781539762.537:912): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.314556] audit: type=1103 audit(1781539762.545:913): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.320287] audit: type=1006 audit(1781539762.545:914): pid=7128 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 217.324680] audit: type=1300 audit(1781539762.545:914): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc1eb61210 a2=3 a3=0 items=0 ppid=1 pid=7128 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 217.331056] audit: type=1327 audit(1781539762.545:914): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 217.345326] audit: type=1105 audit(1781539762.577:915): pid=7128 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 217.353309] audit: type=1103 audit(1781539762.585:916): pid=7133 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 218.628088] audit: type=1106 audit(1781539763.860:917): pid=7128 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 218.635398] audit: type=1104 audit(1781539763.860:918): pid=7128 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 223.781511] kauditd_printk_skb: 1 callbacks suppressed [ 223.781515] audit: type=1130 audit(1781539769.013:920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4108-172.31.31.9:22-20.229.252.112:43492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 224.678681] audit: type=1101 audit(1781539769.910:921): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 224.684975] audit: type=1103 audit(1781539769.913:922): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 224.691069] audit: type=1006 audit(1781539769.913:923): pid=7174 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 224.694438] audit: type=1300 audit(1781539769.913:923): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdfaa2e770 a2=3 a3=0 items=0 ppid=1 pid=7174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 224.700465] audit: type=1327 audit(1781539769.913:923): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 224.714824] audit: type=1105 audit(1781539769.946:924): pid=7174 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 224.722081] audit: type=1103 audit(1781539769.949:925): pid=7178 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 226.066958] audit: type=1106 audit(1781539771.299:926): pid=7174 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success' [ 226.076653] audit: type=1104 audit(1781539771.299:927): pid=7174 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.229.252.112 addr=20.229.252.112 terminal=ssh res=success'