Jun 12 23:01:18.916086 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd490] Jun 12 23:01:18.916118 kernel: Linux version 6.12.93-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 15.2.1_p20260214 p5) 15.2.1 20260214, GNU ld (Gentoo 2.46.0 p1) 2.46.0) #1 SMP PREEMPT Fri Jun 12 21:17:35 -00 2026 Jun 12 23:01:18.916126 kernel: KASLR enabled Jun 12 23:01:18.916131 kernel: earlycon: pl11 at MMIO 0x00000000effec000 (options '') Jun 12 23:01:18.916136 kernel: printk: legacy bootconsole [pl11] enabled Jun 12 23:01:18.916141 kernel: efi: EFI v2.7 by EDK II Jun 12 23:01:18.916147 kernel: efi: ACPI 2.0=0x3f979018 SMBIOS=0x3f8a0000 SMBIOS 3.0=0x3f880000 MEMATTR=0x3e3f8018 RNG=0x3f979998 MEMRESERVE=0x3db7d598 Jun 12 23:01:18.916153 kernel: random: crng init done Jun 12 23:01:18.916158 kernel: secureboot: Secure boot disabled Jun 12 23:01:18.916162 kernel: ACPI: Early table checksum verification disabled Jun 12 23:01:18.916166 kernel: ACPI: RSDP 0x000000003F979018 000024 (v02 VRTUAL) Jun 12 23:01:18.916171 kernel: ACPI: XSDT 0x000000003F979F18 00006C (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Jun 12 23:01:18.916176 kernel: ACPI: FACP 0x000000003F979C18 000114 (v06 VRTUAL MICROSFT 00000001 MSFT 00000001) Jun 12 23:01:18.916181 kernel: ACPI: DSDT 0x000000003F95A018 01E046 (v02 MSFTVM DSDT01 00000001 INTL 20230628) Jun 12 23:01:18.916188 kernel: ACPI: DBG2 0x000000003F979B18 000072 (v00 VRTUAL MICROSFT 00000001 MSFT 00000001) Jun 12 23:01:18.916194 kernel: ACPI: GTDT 0x000000003F979D98 000060 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Jun 12 23:01:18.916199 kernel: ACPI: OEM0 0x000000003F979098 000064 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Jun 12 23:01:18.916205 kernel: ACPI: SPCR 0x000000003F979A98 000050 (v02 VRTUAL MICROSFT 00000001 MSFT 00000001) Jun 12 23:01:18.916210 kernel: ACPI: APIC 0x000000003F979818 0000FC (v04 VRTUAL MICROSFT 00000001 MSFT 00000001) Jun 12 23:01:18.916214 kernel: ACPI: SRAT 0x000000003F979198 000234 (v03 VRTUAL MICROSFT 00000001 MSFT 00000001) Jun 12 23:01:18.916220 kernel: ACPI: PPTT 0x000000003F979418 000120 (v01 VRTUAL MICROSFT 00000000 MSFT 00000000) Jun 12 23:01:18.916226 kernel: ACPI: BGRT 0x000000003F979E98 000038 (v01 VRTUAL MICROSFT 00000001 MSFT 00000001) Jun 12 23:01:18.916230 kernel: ACPI: SPCR: console: pl011,mmio32,0xeffec000,115200 Jun 12 23:01:18.916234 kernel: ACPI: Use ACPI SPCR as default console: Yes Jun 12 23:01:18.916240 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x3fffffff] hotplug Jun 12 23:01:18.916245 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x1bfffffff] hotplug Jun 12 23:01:18.916250 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1c0000000-0xfbfffffff] hotplug Jun 12 23:01:18.916255 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x1000000000-0xffffffffff] hotplug Jun 12 23:01:18.916261 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x10000000000-0x1ffffffffff] hotplug Jun 12 23:01:18.916266 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x20000000000-0x3ffffffffff] hotplug Jun 12 23:01:18.916271 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x40000000000-0x7ffffffffff] hotplug Jun 12 23:01:18.916276 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000000-0xfffffffffff] hotplug Jun 12 23:01:18.916281 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000000-0x1fffffffffff] hotplug Jun 12 23:01:18.916286 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x200000000000-0x3fffffffffff] hotplug Jun 12 23:01:18.916291 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x400000000000-0x7fffffffffff] hotplug Jun 12 23:01:18.916296 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x800000000000-0xffffffffffff] hotplug Jun 12 23:01:18.916300 kernel: NUMA: Node 0 [mem 0x00000000-0x3fffffff] + [mem 0x100000000-0x1bfffffff] -> [mem 0x00000000-0x1bfffffff] Jun 12 23:01:18.916304 kernel: NODE_DATA(0) allocated [mem 0x1bf800a00-0x1bf807fff] Jun 12 23:01:18.916310 kernel: Zone ranges: Jun 12 23:01:18.916314 kernel: DMA [mem 0x0000000000000000-0x00000000ffffffff] Jun 12 23:01:18.916322 kernel: DMA32 empty Jun 12 23:01:18.916328 kernel: Normal [mem 0x0000000100000000-0x00000001bfffffff] Jun 12 23:01:18.916333 kernel: Device empty Jun 12 23:01:18.916338 kernel: Movable zone start for each node Jun 12 23:01:18.916342 kernel: Early memory node ranges Jun 12 23:01:18.916348 kernel: node 0: [mem 0x0000000000000000-0x00000000007fffff] Jun 12 23:01:18.916353 kernel: node 0: [mem 0x0000000000824000-0x000000003f38ffff] Jun 12 23:01:18.916359 kernel: node 0: [mem 0x000000003f390000-0x000000003f93ffff] Jun 12 23:01:18.916363 kernel: node 0: [mem 0x000000003f940000-0x000000003f9effff] Jun 12 23:01:18.916368 kernel: node 0: [mem 0x000000003f9f0000-0x000000003fdeffff] Jun 12 23:01:18.916372 kernel: node 0: [mem 0x000000003fdf0000-0x000000003fffffff] Jun 12 23:01:18.916377 kernel: node 0: [mem 0x0000000100000000-0x00000001bfffffff] Jun 12 23:01:18.916382 kernel: Initmem setup node 0 [mem 0x0000000000000000-0x00000001bfffffff] Jun 12 23:01:18.916387 kernel: On node 0, zone DMA: 36 pages in unavailable ranges Jun 12 23:01:18.916391 kernel: cma: Reserved 16 MiB at 0x000000003ca00000 on node -1 Jun 12 23:01:18.916396 kernel: psci: probing for conduit method from ACPI. Jun 12 23:01:18.916402 kernel: psci: PSCIv1.3 detected in firmware. Jun 12 23:01:18.916407 kernel: psci: Using standard PSCI v0.2 function IDs Jun 12 23:01:18.916411 kernel: psci: MIGRATE_INFO_TYPE not supported. Jun 12 23:01:18.916416 kernel: psci: SMC Calling Convention v1.4 Jun 12 23:01:18.916420 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x0 -> Node 0 Jun 12 23:01:18.916424 kernel: ACPI: NUMA: SRAT: PXM 0 -> MPIDR 0x1 -> Node 0 Jun 12 23:01:18.916430 kernel: percpu: Embedded 34 pages/cpu s98904 r8192 d32168 u139264 Jun 12 23:01:18.916435 kernel: pcpu-alloc: s98904 r8192 d32168 u139264 alloc=34*4096 Jun 12 23:01:18.916439 kernel: pcpu-alloc: [0] 0 [0] 1 Jun 12 23:01:18.916444 kernel: Detected PIPT I-cache on CPU0 Jun 12 23:01:18.916448 kernel: CPU features: detected: Address authentication (architected QARMA5 algorithm) Jun 12 23:01:18.916455 kernel: CPU features: detected: GIC system register CPU interface Jun 12 23:01:18.916459 kernel: CPU features: detected: Spectre-v4 Jun 12 23:01:18.916463 kernel: CPU features: detected: Spectre-BHB Jun 12 23:01:18.916468 kernel: CPU features: kernel page table isolation forced ON by KASLR Jun 12 23:01:18.916472 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jun 12 23:01:18.916478 kernel: CPU features: detected: ARM erratum 2067961 or 2054223 Jun 12 23:01:18.916482 kernel: CPU features: detected: SSBS not fully self-synchronizing Jun 12 23:01:18.916487 kernel: alternatives: applying boot alternatives Jun 12 23:01:18.916494 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=eff8af7b44b99cda8a25b39d004c682c485724e6e8c44b3f6de11cad4878fad3 Jun 12 23:01:18.916499 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jun 12 23:01:18.916505 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jun 12 23:01:18.916510 kernel: Fallback order for Node 0: 0 Jun 12 23:01:18.916514 kernel: Built 1 zonelists, mobility grouping on. Total pages: 1048540 Jun 12 23:01:18.916519 kernel: Policy zone: Normal Jun 12 23:01:18.916523 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jun 12 23:01:18.916527 kernel: software IO TLB: area num 2. Jun 12 23:01:18.916532 kernel: software IO TLB: mapped [mem 0x00000000370c0000-0x000000003b0c0000] (64MB) Jun 12 23:01:18.916536 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jun 12 23:01:18.916542 kernel: ftrace: allocating 41630 entries in 163 pages Jun 12 23:01:18.916547 kernel: ftrace: allocated 163 pages with 4 groups Jun 12 23:01:18.916551 kernel: rcu: Preemptible hierarchical RCU implementation. Jun 12 23:01:18.916558 kernel: rcu: RCU event tracing is enabled. Jun 12 23:01:18.916563 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jun 12 23:01:18.916568 kernel: Trampoline variant of Tasks RCU enabled. Jun 12 23:01:18.916573 kernel: Rude variant of Tasks RCU enabled. Jun 12 23:01:18.916578 kernel: Tracing variant of Tasks RCU enabled. Jun 12 23:01:18.916582 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jun 12 23:01:18.916587 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jun 12 23:01:18.916591 kernel: RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Jun 12 23:01:18.916596 kernel: RCU Tasks Rude: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Jun 12 23:01:18.916601 kernel: RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2. Jun 12 23:01:18.916605 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jun 12 23:01:18.916610 kernel: GICv3: 960 SPIs implemented Jun 12 23:01:18.916615 kernel: GICv3: 0 Extended SPIs implemented Jun 12 23:01:18.916620 kernel: Root IRQ handler: gic_handle_irq Jun 12 23:01:18.916624 kernel: GICv3: GICv3 features: 16 PPIs, RSS Jun 12 23:01:18.916628 kernel: GICv3: GICD_CTRL.DS=0, SCR_EL3.FIQ=0 Jun 12 23:01:18.916634 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000effee000 Jun 12 23:01:18.916639 kernel: ITS: No ITS available, not enabling LPIs Jun 12 23:01:18.916643 kernel: rcu: srcu_init: Setting srcu_struct sizes based on contention. Jun 12 23:01:18.916648 kernel: arch_timer: cp15 timer(s) running at 1000.00MHz (virt). Jun 12 23:01:18.916654 kernel: clocksource: arch_sys_counter: mask: 0x1fffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jun 12 23:01:18.916658 kernel: sched_clock: 61 bits at 1000MHz, resolution 1ns, wraps every 4398046511103ns Jun 12 23:01:18.916664 kernel: Console: colour dummy device 80x25 Jun 12 23:01:18.916669 kernel: printk: legacy console [tty1] enabled Jun 12 23:01:18.916673 kernel: ACPI: Core revision 20240827 Jun 12 23:01:18.916680 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 2000.00 BogoMIPS (lpj=1000000) Jun 12 23:01:18.916685 kernel: pid_max: default: 32768 minimum: 301 Jun 12 23:01:18.916690 kernel: LSM: initializing lsm=lockdown,capability,landlock,selinux,ima Jun 12 23:01:18.916695 kernel: landlock: Up and running. Jun 12 23:01:18.916700 kernel: SELinux: Initializing. Jun 12 23:01:18.916709 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jun 12 23:01:18.916714 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jun 12 23:01:18.916720 kernel: Hyper-V: privilege flags low 0x2e7f, high 0x3b8030, hints 0xa0000e, misc 0x31e1 Jun 12 23:01:18.916725 kernel: Hyper-V: Host Build 10.0.26102.1344-1-0 Jun 12 23:01:18.916731 kernel: Hyper-V: enabling crash_kexec_post_notifiers Jun 12 23:01:18.916736 kernel: rcu: Hierarchical SRCU implementation. Jun 12 23:01:18.916741 kernel: rcu: Max phase no-delay instances is 400. Jun 12 23:01:18.916747 kernel: Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level Jun 12 23:01:18.916753 kernel: Remapping and enabling EFI services. Jun 12 23:01:18.916758 kernel: smp: Bringing up secondary CPUs ... Jun 12 23:01:18.916763 kernel: Detected PIPT I-cache on CPU1 Jun 12 23:01:18.916768 kernel: GICv3: CPU1: found redistributor 1 region 1:0x00000000f000e000 Jun 12 23:01:18.916772 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd490] Jun 12 23:01:18.916790 kernel: smp: Brought up 1 node, 2 CPUs Jun 12 23:01:18.916795 kernel: SMP: Total of 2 processors activated. Jun 12 23:01:18.916801 kernel: CPU: All CPU(s) started at EL1 Jun 12 23:01:18.916806 kernel: CPU features: detected: 32-bit EL0 Support Jun 12 23:01:18.916811 kernel: CPU features: detected: Instruction cache invalidation not required for I/D coherence Jun 12 23:01:18.916818 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jun 12 23:01:18.916823 kernel: CPU features: detected: Common not Private translations Jun 12 23:01:18.916829 kernel: CPU features: detected: CRC32 instructions Jun 12 23:01:18.916834 kernel: CPU features: detected: Generic authentication (architected QARMA5 algorithm) Jun 12 23:01:18.916839 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jun 12 23:01:18.916844 kernel: CPU features: detected: LSE atomic instructions Jun 12 23:01:18.916850 kernel: CPU features: detected: Privileged Access Never Jun 12 23:01:18.916855 kernel: CPU features: detected: Speculation barrier (SB) Jun 12 23:01:18.916861 kernel: CPU features: detected: TLB range maintenance instructions Jun 12 23:01:18.916867 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jun 12 23:01:18.916873 kernel: CPU features: detected: Scalable Vector Extension Jun 12 23:01:18.916878 kernel: alternatives: applying system-wide alternatives Jun 12 23:01:18.916884 kernel: CPU features: detected: Hardware dirty bit management on CPU0-1 Jun 12 23:01:18.916889 kernel: SVE: maximum available vector length 16 bytes per vector Jun 12 23:01:18.916894 kernel: SVE: default vector length 16 bytes per vector Jun 12 23:01:18.916900 kernel: Memory: 3976448K/4194160K available (12480K kernel code, 2492K rwdata, 9560K rodata, 13312K init, 1042K bss, 195764K reserved, 16384K cma-reserved) Jun 12 23:01:18.916906 kernel: devtmpfs: initialized Jun 12 23:01:18.916911 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jun 12 23:01:18.916916 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jun 12 23:01:18.916920 kernel: 2G module region forced by RANDOMIZE_MODULE_REGION_FULL Jun 12 23:01:18.916925 kernel: 0 pages in range for non-PLT usage Jun 12 23:01:18.916930 kernel: 514496 pages in range for PLT usage Jun 12 23:01:18.916935 kernel: pinctrl core: initialized pinctrl subsystem Jun 12 23:01:18.916941 kernel: SMBIOS 3.1.0 present. Jun 12 23:01:18.916946 kernel: DMI: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 01/08/2026 Jun 12 23:01:18.916951 kernel: DMI: Memory slots populated: 2/2 Jun 12 23:01:18.916956 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jun 12 23:01:18.916961 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jun 12 23:01:18.916967 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jun 12 23:01:18.916972 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jun 12 23:01:18.916978 kernel: audit: initializing netlink subsys (disabled) Jun 12 23:01:18.916983 kernel: audit: type=2000 audit(0.059:1): state=initialized audit_enabled=0 res=1 Jun 12 23:01:18.916988 kernel: thermal_sys: Registered thermal governor 'step_wise' Jun 12 23:01:18.916992 kernel: cpuidle: using governor menu Jun 12 23:01:18.916997 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jun 12 23:01:18.917002 kernel: ASID allocator initialised with 32768 entries Jun 12 23:01:18.917007 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jun 12 23:01:18.917013 kernel: Serial: AMBA PL011 UART driver Jun 12 23:01:18.917018 kernel: HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages Jun 12 23:01:18.917023 kernel: HugeTLB: 0 KiB vmemmap can be freed for a 1.00 GiB page Jun 12 23:01:18.917027 kernel: HugeTLB: registered 32.0 MiB page size, pre-allocated 0 pages Jun 12 23:01:18.917032 kernel: HugeTLB: 0 KiB vmemmap can be freed for a 32.0 MiB page Jun 12 23:01:18.917037 kernel: HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages Jun 12 23:01:18.917042 kernel: HugeTLB: 0 KiB vmemmap can be freed for a 2.00 MiB page Jun 12 23:01:18.917047 kernel: HugeTLB: registered 64.0 KiB page size, pre-allocated 0 pages Jun 12 23:01:18.917053 kernel: HugeTLB: 0 KiB vmemmap can be freed for a 64.0 KiB page Jun 12 23:01:18.917057 kernel: ACPI: Added _OSI(Module Device) Jun 12 23:01:18.917062 kernel: ACPI: Added _OSI(Processor Device) Jun 12 23:01:18.917067 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jun 12 23:01:18.917072 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jun 12 23:01:18.917077 kernel: ACPI: Interpreter enabled Jun 12 23:01:18.917082 kernel: ACPI: Using GIC for interrupt routing Jun 12 23:01:18.917088 kernel: ARMH0011:00: ttyAMA0 at MMIO 0xeffec000 (irq = 12, base_baud = 0) is a SBSA Jun 12 23:01:18.917092 kernel: printk: legacy console [ttyAMA0] enabled Jun 12 23:01:18.917097 kernel: printk: legacy bootconsole [pl11] disabled Jun 12 23:01:18.917102 kernel: ARMH0011:01: ttyAMA1 at MMIO 0xeffeb000 (irq = 13, base_baud = 0) is a SBSA Jun 12 23:01:18.917107 kernel: ACPI: CPU0 has been hot-added Jun 12 23:01:18.917112 kernel: ACPI: CPU1 has been hot-added Jun 12 23:01:18.917117 kernel: iommu: Default domain type: Translated Jun 12 23:01:18.917123 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jun 12 23:01:18.917128 kernel: efivars: Registered efivars operations Jun 12 23:01:18.917133 kernel: vgaarb: loaded Jun 12 23:01:18.917138 kernel: clocksource: Switched to clocksource arch_sys_counter Jun 12 23:01:18.917142 kernel: VFS: Disk quotas dquot_6.6.0 Jun 12 23:01:18.917147 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jun 12 23:01:18.917152 kernel: pnp: PnP ACPI init Jun 12 23:01:18.917158 kernel: pnp: PnP ACPI: found 0 devices Jun 12 23:01:18.917163 kernel: NET: Registered PF_INET protocol family Jun 12 23:01:18.917168 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jun 12 23:01:18.917173 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jun 12 23:01:18.917178 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jun 12 23:01:18.917182 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jun 12 23:01:18.917187 kernel: TCP bind hash table entries: 32768 (order: 8, 1048576 bytes, linear) Jun 12 23:01:18.917193 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jun 12 23:01:18.917198 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jun 12 23:01:18.917203 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jun 12 23:01:18.917208 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jun 12 23:01:18.917213 kernel: PCI: CLS 0 bytes, default 64 Jun 12 23:01:18.917217 kernel: kvm [1]: HYP mode not available Jun 12 23:01:18.917222 kernel: Initialise system trusted keyrings Jun 12 23:01:18.917228 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jun 12 23:01:18.917233 kernel: Key type asymmetric registered Jun 12 23:01:18.917238 kernel: Asymmetric key parser 'x509' registered Jun 12 23:01:18.917243 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jun 12 23:01:18.917248 kernel: io scheduler mq-deadline registered Jun 12 23:01:18.917252 kernel: io scheduler kyber registered Jun 12 23:01:18.917257 kernel: io scheduler bfq registered Jun 12 23:01:18.917262 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jun 12 23:01:18.917268 kernel: ACPI: bus type drm_connector registered Jun 12 23:01:18.917273 kernel: thunder_xcv, ver 1.0 Jun 12 23:01:18.917278 kernel: thunder_bgx, ver 1.0 Jun 12 23:01:18.917283 kernel: nicpf, ver 1.0 Jun 12 23:01:18.917287 kernel: nicvf, ver 1.0 Jun 12 23:01:18.917450 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jun 12 23:01:18.917538 kernel: rtc-efi rtc-efi.0: setting system clock to 2026-06-12T23:01:14 UTC (1781305274) Jun 12 23:01:18.917544 kernel: efifb: probing for efifb Jun 12 23:01:18.917550 kernel: efifb: framebuffer at 0x40000000, using 3072k, total 3072k Jun 12 23:01:18.917555 kernel: efifb: mode is 1024x768x32, linelength=4096, pages=1 Jun 12 23:01:18.917560 kernel: efifb: scrolling: redraw Jun 12 23:01:18.917565 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Jun 12 23:01:18.917570 kernel: Console: switching to colour frame buffer device 128x48 Jun 12 23:01:18.917576 kernel: fb0: EFI VGA frame buffer device Jun 12 23:01:18.917581 kernel: SMCCC: SOC_ID: ARCH_SOC_ID not implemented, skipping .... Jun 12 23:01:18.917586 kernel: hid: raw HID events driver (C) Jiri Kosina Jun 12 23:01:18.917591 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 (0,8000003f) counters available Jun 12 23:01:18.917596 kernel: watchdog: NMI not fully supported Jun 12 23:01:18.917600 kernel: watchdog: Hard watchdog permanently disabled Jun 12 23:01:18.917605 kernel: NET: Registered PF_INET6 protocol family Jun 12 23:01:18.917611 kernel: Segment Routing with IPv6 Jun 12 23:01:18.917616 kernel: In-situ OAM (IOAM) with IPv6 Jun 12 23:01:18.917621 kernel: NET: Registered PF_PACKET protocol family Jun 12 23:01:18.917626 kernel: Key type dns_resolver registered Jun 12 23:01:18.917631 kernel: registered taskstats version 1 Jun 12 23:01:18.917636 kernel: Loading compiled-in X.509 certificates Jun 12 23:01:18.917641 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 6.12.93-flatcar: f98a8acc11d03ae4e1f6fbcf6bcf69b687068032' Jun 12 23:01:18.917646 kernel: Demotion targets for Node 0: null Jun 12 23:01:18.917651 kernel: Key type .fscrypt registered Jun 12 23:01:18.917656 kernel: Key type fscrypt-provisioning registered Jun 12 23:01:18.917661 kernel: ima: No TPM chip found, activating TPM-bypass! Jun 12 23:01:18.917666 kernel: ima: Allocated hash algorithm: sha1 Jun 12 23:01:18.917671 kernel: ima: No architecture policies found Jun 12 23:01:18.917676 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jun 12 23:01:18.917680 kernel: clk: Disabling unused clocks Jun 12 23:01:18.917686 kernel: PM: genpd: Disabling unused power domains Jun 12 23:01:18.917691 kernel: Freeing unused kernel memory: 13312K Jun 12 23:01:18.917696 kernel: Run /init as init process Jun 12 23:01:18.917701 kernel: with arguments: Jun 12 23:01:18.917706 kernel: /init Jun 12 23:01:18.917710 kernel: with environment: Jun 12 23:01:18.917715 kernel: HOME=/ Jun 12 23:01:18.917721 kernel: TERM=linux Jun 12 23:01:18.917726 kernel: hv_vmbus: Vmbus version:5.3 Jun 12 23:01:18.917731 kernel: hv_vmbus: registering driver hid_hyperv Jun 12 23:01:18.917736 kernel: SCSI subsystem initialized Jun 12 23:01:18.917741 kernel: input: Microsoft Vmbus HID-compliant Mouse as /devices/0006:045E:0621.0001/input/input0 Jun 12 23:01:18.917853 kernel: hid-hyperv 0006:045E:0621.0001: input: VIRTUAL HID v0.01 Mouse [Microsoft Vmbus HID-compliant Mouse] on Jun 12 23:01:18.917862 kernel: hv_vmbus: registering driver hyperv_keyboard Jun 12 23:01:18.917867 kernel: input: AT Translated Set 2 keyboard as /devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0004:00/MSFT1000:00/d34b2567-b9b6-42b9-8778-0a4ec0b955bf/serio0/input/input1 Jun 12 23:01:18.917873 kernel: pps_core: LinuxPPS API ver. 1 registered Jun 12 23:01:18.917878 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jun 12 23:01:18.917883 kernel: PTP clock support registered Jun 12 23:01:18.917888 kernel: hv_utils: Registering HyperV Utility Driver Jun 12 23:01:18.917893 kernel: hv_vmbus: registering driver hv_utils Jun 12 23:01:18.917899 kernel: hv_utils: Shutdown IC version 3.2 Jun 12 23:01:18.917904 kernel: hv_utils: Heartbeat IC version 3.0 Jun 12 23:01:18.917908 kernel: hv_utils: TimeSync IC version 4.0 Jun 12 23:01:18.917913 kernel: hv_vmbus: registering driver hv_storvsc Jun 12 23:01:18.918030 kernel: scsi host1: storvsc_host_t Jun 12 23:01:18.918129 kernel: scsi host0: storvsc_host_t Jun 12 23:01:18.918240 kernel: scsi 0:0:0:0: Direct-Access Msft Virtual Disk 1.0 PQ: 0 ANSI: 5 Jun 12 23:01:18.918348 kernel: scsi 0:0:0:2: CD-ROM Msft Virtual DVD-ROM 1.0 PQ: 0 ANSI: 5 Jun 12 23:01:18.918449 kernel: sd 0:0:0:0: [sda] 63737856 512-byte logical blocks: (32.6 GB/30.4 GiB) Jun 12 23:01:18.918548 kernel: sd 0:0:0:0: [sda] 4096-byte physical blocks Jun 12 23:01:18.918647 kernel: sd 0:0:0:0: [sda] Write Protect is off Jun 12 23:01:18.918745 kernel: sd 0:0:0:0: [sda] Mode Sense: 0f 00 10 00 Jun 12 23:01:18.918870 kernel: sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, supports DPO and FUA Jun 12 23:01:18.918877 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jun 12 23:01:18.918977 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Jun 12 23:01:18.919076 kernel: sr 0:0:0:2: [sr0] scsi-1 drive Jun 12 23:01:18.919082 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jun 12 23:01:18.919179 kernel: sr 0:0:0:2: Attached scsi CD-ROM sr0 Jun 12 23:01:18.919187 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jun 12 23:01:18.919193 kernel: device-mapper: uevent: version 1.0.3 Jun 12 23:01:18.919198 kernel: device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev Jun 12 23:01:18.919203 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:18.919208 kernel: raid6: neonx8 gen() 18544 MB/s Jun 12 23:01:18.919213 kernel: raid6: neonx4 gen() 18578 MB/s Jun 12 23:01:18.919218 kernel: raid6: neonx2 gen() 17078 MB/s Jun 12 23:01:18.919223 kernel: raid6: neonx1 gen() 15257 MB/s Jun 12 23:01:18.919228 kernel: raid6: int64x8 gen() 9054 MB/s Jun 12 23:01:18.919233 kernel: raid6: int64x4 gen() 10772 MB/s Jun 12 23:01:18.919238 kernel: raid6: int64x2 gen() 8849 MB/s Jun 12 23:01:18.919243 kernel: raid6: int64x1 gen() 7075 MB/s Jun 12 23:01:18.919248 kernel: raid6: using algorithm neonx4 gen() 18578 MB/s Jun 12 23:01:18.919253 kernel: raid6: .... xor() 15166 MB/s, rmw enabled Jun 12 23:01:18.919259 kernel: raid6: using neon recovery algorithm Jun 12 23:01:18.919264 kernel: xor: measuring software checksum speed Jun 12 23:01:18.919269 kernel: 8regs : 29515 MB/sec Jun 12 23:01:18.919274 kernel: 32regs : 29677 MB/sec Jun 12 23:01:18.919279 kernel: arm64_neon : 37070 MB/sec Jun 12 23:01:18.919284 kernel: xor: using function: arm64_neon (37070 MB/sec) Jun 12 23:01:18.919289 kernel: Btrfs loaded, zoned=no, fsverity=no Jun 12 23:01:18.919294 kernel: BTRFS: device fsid 9873f5d4-bd96-433b-ae3a-6aa53b807b23 devid 1 transid 43 /dev/mapper/usr (254:0) scanned by mount (369) Jun 12 23:01:18.919300 kernel: BTRFS info (device dm-0): first mount of filesystem 9873f5d4-bd96-433b-ae3a-6aa53b807b23 Jun 12 23:01:18.919305 kernel: BTRFS info (device dm-0): using crc32c (crc32c-generic) checksum algorithm Jun 12 23:01:18.919310 kernel: BTRFS info (device dm-0 state E): disabling log replay at mount time Jun 12 23:01:18.919315 kernel: BTRFS info (device dm-0 state E): enabling free space tree Jun 12 23:01:18.919320 kernel: loop: module loaded Jun 12 23:01:18.919325 kernel: loop0: detected capacity change from 0 to 99736 Jun 12 23:01:18.919330 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jun 12 23:01:18.919336 systemd[1]: Successfully made /usr/ read-only. Jun 12 23:01:18.919344 systemd[1]: systemd 260.1 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) Jun 12 23:01:18.919350 systemd[1]: Detected virtualization microsoft. Jun 12 23:01:18.919355 systemd[1]: Detected architecture arm64. Jun 12 23:01:18.919360 systemd[1]: Running in initrd. Jun 12 23:01:18.919365 systemd[1]: Initializing machine ID from random generator. Jun 12 23:01:18.919372 systemd[1]: No hostname configured, using default hostname. Jun 12 23:01:18.919377 systemd[1]: Hostname set to . Jun 12 23:01:18.919382 systemd[1]: Queued start job for default target initrd.target. Jun 12 23:01:18.919388 systemd[1]: Unnecessary job was removed for dev-mapper-usr.device - /dev/mapper/usr. Jun 12 23:01:18.919393 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Jun 12 23:01:18.919399 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Jun 12 23:01:18.919406 systemd[1]: Expecting device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - /dev/disk/by-label/EFI-SYSTEM... Jun 12 23:01:18.919411 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Jun 12 23:01:18.919417 systemd[1]: Expecting device dev-disk-by\x2dlabel-ROOT.device - /dev/disk/by-label/ROOT... Jun 12 23:01:18.919423 systemd[1]: Expecting device dev-disk-by\x2dpartlabel-USR\x2dA.device - /dev/disk/by-partlabel/USR-A... Jun 12 23:01:18.919428 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Jun 12 23:01:18.919434 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Jun 12 23:01:18.919440 systemd[1]: Reached target initrd-usr-fs.target - Initrd /usr File System. Jun 12 23:01:18.919445 systemd[1]: Reached target paths.target - Path Units. Jun 12 23:01:18.919451 systemd[1]: Reached target slices.target - Slice Units. Jun 12 23:01:18.919456 systemd[1]: Reached target swap.target - Swaps. Jun 12 23:01:18.919462 systemd[1]: Reached target timers.target - Timer Units. Jun 12 23:01:18.919467 systemd[1]: Listening on iscsid.socket - Open-iSCSI iscsid Socket. Jun 12 23:01:18.919473 systemd[1]: Listening on iscsiuio.socket - Open-iSCSI iscsiuio Socket. Jun 12 23:01:18.919479 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. Jun 12 23:01:18.919489 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Jun 12 23:01:18.919495 systemd[1]: Listening on systemd-journald-dev-log.socket - Journal Socket (/dev/log). Jun 12 23:01:18.919501 systemd[1]: Listening on systemd-journald.socket - Journal Sockets. Jun 12 23:01:18.919507 systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Jun 12 23:01:18.919513 systemd[1]: Listening on systemd-networkd.socket - Network Management Netlink Socket. Jun 12 23:01:18.919519 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Jun 12 23:01:18.919524 systemd[1]: Listening on systemd-udevd-kernel.socket - udev Kernel Socket. Jun 12 23:01:18.919530 systemd[1]: Reached target sockets.target - Socket Units. Jun 12 23:01:18.919536 systemd[1]: afterburn-network-kargs.service - Afterburn Initrd Setup Network Kernel Arguments skipped, no trigger condition checks were met. Jun 12 23:01:18.919541 systemd[1]: Starting ignition-setup-pre.service - Ignition env setup... Jun 12 23:01:18.919548 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Jun 12 23:01:18.919553 systemd[1]: Finished network-cleanup.service - Network Cleanup. Jun 12 23:01:18.919559 systemd[1]: systemd-battery-check.service - Early Battery Level Check skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/class/power_supply Jun 12 23:01:18.919565 systemd[1]: Starting systemd-fsck-usr.service... Jun 12 23:01:18.919571 systemd[1]: Starting systemd-journald.service - Journal Service... Jun 12 23:01:18.919577 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Jun 12 23:01:18.919597 systemd-journald[565]: Collecting audit messages is enabled. Jun 12 23:01:18.919612 systemd-journald[565]: Journal started Jun 12 23:01:18.919625 systemd-journald[565]: Runtime Journal (/run/log/journal/20fe84103633475690f08714e96a888c) is 8M, max 78.3M, 70.3M free. Jun 12 23:01:18.928095 systemd-modules-load[568]: Using 2 probe threads Jun 12 23:01:18.937618 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jun 12 23:01:18.955127 systemd[1]: Started systemd-journald.service - Journal Service. Jun 12 23:01:18.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:18.956577 systemd[1]: Finished ignition-setup-pre.service - Ignition env setup. Jun 12 23:01:18.970858 kernel: audit: type=1130 audit(1781305278.953:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:18.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:18.988547 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Jun 12 23:01:18.993626 kernel: audit: type=1130 audit(1781305278.974:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:18.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.012763 systemd[1]: Finished systemd-fsck-usr.service. Jun 12 23:01:19.019282 kernel: audit: type=1130 audit(1781305278.997:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.027939 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Jun 12 23:01:19.043491 kernel: audit: type=1130 audit(1781305279.017:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.046633 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Jun 12 23:01:19.077801 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jun 12 23:01:19.121533 systemd-modules-load[568]: Inserted module 'br_netfilter' Jun 12 23:01:19.125428 kernel: Bridge firewalling registered Jun 12 23:01:19.135865 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Jun 12 23:01:19.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.142696 systemd-tmpfiles[595]: /usr/lib/tmpfiles.d/systemd.conf:30: Duplicate line for path "/var/lib/systemd", ignoring. Jun 12 23:01:19.142739 systemd-tmpfiles[595]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. Jun 12 23:01:19.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.195868 kernel: audit: type=1130 audit(1781305279.143:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.147073 systemd-vconsole-setup[570]: Configuration of first virtual console was skipped, ignoring remaining ones. Jun 12 23:01:19.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.219875 kernel: audit: type=1130 audit(1781305279.173:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.169151 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Jun 12 23:01:19.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.240408 kernel: audit: type=1130 audit(1781305279.197:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.180765 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Jun 12 23:01:19.251170 kernel: audit: type=1130 audit(1781305279.221:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.205836 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Jun 12 23:01:19.225129 systemd[1]: Starting dracut-cmdline-ask.service - dracut ask for additional cmdline parameters... Jun 12 23:01:19.263131 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Jun 12 23:01:19.275715 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Jun 12 23:01:19.291508 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jun 12 23:01:19.296845 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Jun 12 23:01:19.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.328847 kernel: audit: type=1130 audit(1781305279.301:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.328869 kernel: audit: type=1131 audit(1781305279.301:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.330844 systemd[1]: Finished dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Jun 12 23:01:19.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.342186 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Jun 12 23:01:19.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.349544 systemd[1]: Starting dracut-cmdline.service - dracut cmdline hook... Jun 12 23:01:19.363000 audit: BPF prog-id=5 op=LOAD Jun 12 23:01:19.366209 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Jun 12 23:01:19.379470 dracut-cmdline[630]: dracut-110 Jun 12 23:01:19.386070 dracut-cmdline[630]: Using kernel command line parameters: SYSTEMD_SULOGIN_FORCE=1 BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyAMA0,115200n8 earlycon=pl011,0xeffec000 flatcar.first_boot=detected acpi=force flatcar.oem.id=azure flatcar.autologin verity.usrhash=eff8af7b44b99cda8a25b39d004c682c485724e6e8c44b3f6de11cad4878fad3 Jun 12 23:01:19.429789 systemd-resolved[633]: Positive Trust Anchors: Jun 12 23:01:19.431810 systemd-resolved[633]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jun 12 23:01:19.431814 systemd-resolved[633]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Jun 12 23:01:19.431835 systemd-resolved[633]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Jun 12 23:01:19.463987 systemd-resolved[633]: Defaulting to hostname 'linux'. Jun 12 23:01:19.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.464755 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Jun 12 23:01:19.476770 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Jun 12 23:01:19.564808 kernel: Loading iSCSI transport class v2.0-870. Jun 12 23:01:19.607197 kernel: iscsi: registered transport (tcp) Jun 12 23:01:19.637498 kernel: iscsi: registered transport (qla4xxx) Jun 12 23:01:19.637553 kernel: QLogic iSCSI HBA Driver Jun 12 23:01:19.704609 systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... Jun 12 23:01:19.724889 systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. Jun 12 23:01:19.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.730719 systemd[1]: Reached target network-pre.target - Preparation for Network. Jun 12 23:01:19.810830 systemd[1]: Finished dracut-cmdline.service - dracut cmdline hook. Jun 12 23:01:19.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.817721 systemd[1]: Starting dracut-pre-udev.service - dracut pre-udev hook... Jun 12 23:01:19.835043 systemd[1]: Starting parse-ip-for-networkd.service - Write systemd-networkd units from cmdline... Jun 12 23:01:19.850918 systemd[1]: Finished dracut-pre-udev.service - dracut pre-udev hook. Jun 12 23:01:19.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:19.859000 audit: BPF prog-id=6 op=LOAD Jun 12 23:01:19.859000 audit: BPF prog-id=7 op=LOAD Jun 12 23:01:19.862172 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Jun 12 23:01:20.098666 systemd-udevd[851]: Using default interface naming scheme 'v260'. Jun 12 23:01:20.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:20.098733 systemd[1]: Finished parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Jun 12 23:01:20.117612 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Jun 12 23:01:20.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:20.129972 systemd[1]: Starting dracut-pre-trigger.service - dracut pre-trigger hook... Jun 12 23:01:20.145000 audit: BPF prog-id=8 op=LOAD Jun 12 23:01:20.149926 systemd[1]: Starting systemd-networkd.service - Network Management... Jun 12 23:01:20.166040 dracut-pre-trigger[990]: rd.md=0: removing MD RAID activation Jun 12 23:01:20.192913 systemd[1]: Finished dracut-pre-trigger.service - dracut pre-trigger hook. Jun 12 23:01:20.197882 systemd-networkd[997]: Failed to open nftables netlink socket. IPMasquerade= and NFTSet= settings will not be applied. Ignoring: Protocol not supported Jun 12 23:01:20.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:20.204492 systemd-networkd[997]: lo: Link UP Jun 12 23:01:20.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:20.204495 systemd-networkd[997]: lo: Gained carrier Jun 12 23:01:20.206017 systemd[1]: Started systemd-networkd.service - Network Management. Jun 12 23:01:20.216859 systemd[1]: Reached target network.target - Network. Jun 12 23:01:20.225954 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Jun 12 23:01:20.307669 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Jun 12 23:01:20.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:20.322554 systemd[1]: Starting dracut-initqueue.service - dracut initqueue hook... Jun 12 23:01:20.410831 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#68 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Jun 12 23:01:20.446973 kernel: hv_vmbus: registering driver hv_netvsc Jun 12 23:01:20.450136 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jun 12 23:01:20.450259 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jun 12 23:01:20.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:20.461407 systemd[1]: Stopping systemd-vconsole-setup.service - Virtual Console Setup... Jun 12 23:01:20.477351 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jun 12 23:01:20.488153 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jun 12 23:01:20.491542 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jun 12 23:01:20.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:20.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:20.502539 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jun 12 23:01:20.524444 systemd-vconsole-setup[1089]: Configuration of first virtual console was skipped, ignoring remaining ones. Jun 12 23:01:20.532372 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Jun 12 23:01:20.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:20.549787 kernel: hv_netvsc 002248be-e385-0022-48be-e385002248be eth0: VF slot 1 added Jun 12 23:01:20.568846 systemd-networkd[997]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jun 12 23:01:20.568858 systemd-networkd[997]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jun 12 23:01:20.570452 systemd-networkd[997]: eth0: Link UP Jun 12 23:01:20.570582 systemd-networkd[997]: eth0: Gained carrier Jun 12 23:01:20.601999 kernel: hv_vmbus: registering driver hv_pci Jun 12 23:01:20.570594 systemd-networkd[997]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jun 12 23:01:20.615453 kernel: hv_pci dc8054a9-ce89-4927-97dc-4a31d7602033: PCI VMBus probing: Using version 0x10004 Jun 12 23:01:20.615650 kernel: hv_pci dc8054a9-ce89-4927-97dc-4a31d7602033: PCI host bridge to bus ce89:00 Jun 12 23:01:20.615752 kernel: pci_bus ce89:00: root bus resource [mem 0xfc0000000-0xfc00fffff window] Jun 12 23:01:20.615879 kernel: pci_bus ce89:00: No busn resource found for root bus, will use [bus 00-ff] Jun 12 23:01:20.625868 kernel: pci ce89:00:02.0: [15b3:101a] type 00 class 0x020000 PCIe Endpoint Jun 12 23:01:20.630845 kernel: pci ce89:00:02.0: BAR 0 [mem 0xfc0000000-0xfc00fffff 64bit pref] Jun 12 23:01:20.631822 systemd-networkd[997]: eth0: DHCPv4 address 10.0.0.35/24, gateway 10.0.0.1 acquired from 168.63.129.16 Jun 12 23:01:20.641867 kernel: pci ce89:00:02.0: enabling Extended Tags Jun 12 23:01:20.655843 kernel: pci ce89:00:02.0: 0.000 Gb/s available PCIe bandwidth, limited by Unknown x0 link at ce89:00:02.0 (capable of 252.048 Gb/s with 16.0 GT/s PCIe x16 link) Jun 12 23:01:20.666003 kernel: pci_bus ce89:00: busn_res: [bus 00-ff] end is updated to 00 Jun 12 23:01:20.666182 kernel: pci ce89:00:02.0: BAR 0 [mem 0xfc0000000-0xfc00fffff 64bit pref]: assigned Jun 12 23:01:20.820951 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device - Virtual_Disk USR-A. Jun 12 23:01:20.832971 systemd[1]: Starting disk-uuid.service - Generate new UUID for disk GPT if necessary... Jun 12 23:01:20.854004 kernel: mlx5_core ce89:00:02.0: enabling device (0000 -> 0002) Jun 12 23:01:20.866789 kernel: mlx5_core ce89:00:02.0: PTM is not supported by PCIe Jun 12 23:01:20.866992 kernel: mlx5_core ce89:00:02.0: firmware version: 16.30.5026 Jun 12 23:01:20.956828 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device - Virtual_Disk ROOT. Jun 12 23:01:20.982353 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device - Virtual_Disk EFI-SYSTEM. Jun 12 23:01:21.056132 kernel: hv_netvsc 002248be-e385-0022-48be-e385002248be eth0: VF registering: eth1 Jun 12 23:01:21.056358 kernel: mlx5_core ce89:00:02.0 eth1: joined to eth0 Jun 12 23:01:21.062436 kernel: mlx5_core ce89:00:02.0: MLX5E: StrdRq(1) RqSz(8) StrdSz(2048) RxCqeCmprss(0 basic) Jun 12 23:01:21.075438 systemd-networkd[997]: eth1: Interface name change detected, renamed to enP52873s1. Jun 12 23:01:21.081156 kernel: mlx5_core ce89:00:02.0 enP52873s1: renamed from eth1 Jun 12 23:01:21.103606 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - Virtual_Disk OEM. Jun 12 23:01:21.119886 systemd[1]: Mounting oem.mount - /oem... Jun 12 23:01:21.155800 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 (8:6) scanned by mount (1172) Jun 12 23:01:21.169802 kernel: BTRFS info (device sda6): first mount of filesystem 9b374379-5d9b-4c56-8f32-e7ff3e1592df Jun 12 23:01:21.169840 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Jun 12 23:01:21.201794 kernel: mlx5_core ce89:00:02.0 enP52873s1: Link up Jun 12 23:01:21.220984 kernel: BTRFS info (device sda6): turning on async discard Jun 12 23:01:21.221021 kernel: BTRFS info (device sda6): enabling free space tree Jun 12 23:01:21.222317 systemd[1]: Mounted oem.mount - /oem. Jun 12 23:01:21.239413 systemd[1]: Starting ignition-fetch-offline.service - Ignition (fetch-offline)... Jun 12 23:01:21.248809 kernel: hv_netvsc 002248be-e385-0022-48be-e385002248be eth0: Data path switched to VF: enP52873s1 Jun 12 23:01:21.254518 systemd-networkd[997]: enP52873s1: Link UP Jun 12 23:01:21.305760 systemd[1]: Finished dracut-initqueue.service - dracut initqueue hook. Jun 12 23:01:21.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:21.311339 systemd[1]: Reached target remote-fs-pre.target - Preparation for Remote File Systems. Jun 12 23:01:21.316566 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Jun 12 23:01:21.325131 systemd[1]: Reached target remote-fs.target - Remote File Systems. Jun 12 23:01:21.340954 systemd[1]: Starting dracut-pre-mount.service - dracut pre-mount hook... Jun 12 23:01:21.366330 systemd[1]: Finished dracut-pre-mount.service - dracut pre-mount hook. Jun 12 23:01:21.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:21.578934 systemd-networkd[997]: enP52873s1: Gained carrier Jun 12 23:01:22.042054 disk-uuid[1123]: Warning: The kernel is still using the old partition table. Jun 12 23:01:22.042054 disk-uuid[1123]: The new table will be used at the next reboot or after you Jun 12 23:01:22.042054 disk-uuid[1123]: run partprobe(8) or kpartx(8) Jun 12 23:01:22.042054 disk-uuid[1123]: The operation has completed successfully. Jun 12 23:01:22.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:22.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:22.051795 systemd[1]: disk-uuid.service: Deactivated successfully. Jun 12 23:01:22.054078 systemd[1]: Finished disk-uuid.service - Generate new UUID for disk GPT if necessary. Jun 12 23:01:22.402894 systemd-networkd[997]: eth0: Gained IPv6LL Jun 12 23:01:22.471487 ignition[1261]: Ignition 2.24.0 Jun 12 23:01:22.471503 ignition[1261]: Stage: fetch-offline Jun 12 23:01:22.471658 ignition[1261]: no config dir at "/usr/lib/ignition/base.d" Jun 12 23:01:22.478432 systemd[1]: Finished ignition-fetch-offline.service - Ignition (fetch-offline). Jun 12 23:01:22.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:22.471665 ignition[1261]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Jun 12 23:01:22.488531 systemd[1]: Starting ignition-fetch.service - Ignition (fetch)... Jun 12 23:01:22.471740 ignition[1261]: parsed url from cmdline: "" Jun 12 23:01:22.471742 ignition[1261]: no config URL provided Jun 12 23:01:22.471745 ignition[1261]: reading system config file "/usr/lib/ignition/user.ign" Jun 12 23:01:22.471760 ignition[1261]: no config at "/usr/lib/ignition/user.ign" Jun 12 23:01:22.471764 ignition[1261]: failed to fetch config: resource requires networking Jun 12 23:01:22.472035 ignition[1261]: Ignition finished successfully Jun 12 23:01:22.517178 ignition[1330]: Ignition 2.24.0 Jun 12 23:01:22.517182 ignition[1330]: Stage: fetch Jun 12 23:01:22.517338 ignition[1330]: no config dir at "/usr/lib/ignition/base.d" Jun 12 23:01:22.517345 ignition[1330]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Jun 12 23:01:22.517400 ignition[1330]: parsed url from cmdline: "" Jun 12 23:01:22.517403 ignition[1330]: no config URL provided Jun 12 23:01:22.517406 ignition[1330]: reading system config file "/usr/lib/ignition/user.ign" Jun 12 23:01:22.517413 ignition[1330]: no config at "/usr/lib/ignition/user.ign" Jun 12 23:01:22.517426 ignition[1330]: GET http://169.254.169.254/metadata/instance/compute/userData?api-version=2021-01-01&format=text: attempt #1 Jun 12 23:01:22.577765 ignition[1330]: GET result: OK Jun 12 23:01:22.577806 ignition[1330]: config has been read from IMDS userdata Jun 12 23:01:22.577813 ignition[1330]: parsing config with SHA512: 29e0faf1cf1a67406886f8f9a70cf60527585c3490910b5effcad86c60d6afac410346062f80d073d5bb30bfe5a1f1b0bd74e231145fa71b19eb6ebcf352c5b4 Jun 12 23:01:22.581963 unknown[1330]: fetched base config from "system" Jun 12 23:01:22.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:22.582104 ignition[1330]: fetch: fetch complete Jun 12 23:01:22.581973 unknown[1330]: fetched base config from "system" Jun 12 23:01:22.582110 ignition[1330]: fetch: fetch passed Jun 12 23:01:22.581977 unknown[1330]: fetched user config from "azure" Jun 12 23:01:22.582147 ignition[1330]: Ignition finished successfully Jun 12 23:01:22.584499 systemd[1]: Finished ignition-fetch.service - Ignition (fetch). Jun 12 23:01:22.590620 systemd[1]: Starting ignition-kargs.service - Ignition (kargs)... Jun 12 23:01:22.626436 ignition[1339]: Ignition 2.24.0 Jun 12 23:01:22.626453 ignition[1339]: Stage: kargs Jun 12 23:01:22.626596 ignition[1339]: no config dir at "/usr/lib/ignition/base.d" Jun 12 23:01:22.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:22.632212 systemd[1]: Finished ignition-kargs.service - Ignition (kargs). Jun 12 23:01:22.626602 ignition[1339]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Jun 12 23:01:22.639051 systemd[1]: Starting ignition-disks.service - Ignition (disks)... Jun 12 23:01:22.626915 ignition[1339]: kargs: kargs passed Jun 12 23:01:22.626950 ignition[1339]: Ignition finished successfully Jun 12 23:01:22.683993 systemd[1]: ignition-kargs.service: Deactivated successfully. Jun 12 23:01:22.684120 systemd[1]: Stopped ignition-kargs.service - Ignition (kargs). Jun 12 23:01:22.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:22.693824 systemd[1]: ignition-fetch.service: Deactivated successfully. Jun 12 23:01:22.699000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:22.693925 systemd[1]: Stopped ignition-fetch.service - Ignition (fetch). Jun 12 23:01:22.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:22.701605 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jun 12 23:01:22.701739 systemd[1]: Stopped ignition-fetch-offline.service - Ignition (fetch-offline). Jun 12 23:01:22.711888 systemd[1]: Unmounting oem.mount - /oem... Jun 12 23:01:22.735799 kernel: BTRFS info (device sda6): last unmount of filesystem 9b374379-5d9b-4c56-8f32-e7ff3e1592df Jun 12 23:01:22.735941 systemd[1]: oem.mount: Deactivated successfully. Jun 12 23:01:22.736729 systemd[1]: Unmounted oem.mount - /oem. Jun 12 23:01:22.763686 ignition[1361]: Ignition 2.24.0 Jun 12 23:01:22.763703 ignition[1361]: Stage: disks Jun 12 23:01:22.768017 systemd[1]: Finished ignition-disks.service - Ignition (disks). Jun 12 23:01:22.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:22.763895 ignition[1361]: no config dir at "/usr/lib/ignition/base.d" Jun 12 23:01:22.773513 systemd[1]: Reached target initrd-root-device.target - Initrd Root Device. Jun 12 23:01:22.763903 ignition[1361]: no config dir at "/usr/lib/ignition/base.platform.d/azure" Jun 12 23:01:22.781303 systemd[1]: Reached target local-fs-pre.target - Preparation for Local File Systems. Jun 12 23:01:22.764276 ignition[1361]: disks: disks passed Jun 12 23:01:22.790041 systemd[1]: Reached target local-fs.target - Local File Systems. Jun 12 23:01:22.764311 ignition[1361]: Ignition finished successfully Jun 12 23:01:22.797965 systemd[1]: Reached target sysinit.target - System Initialization. Jun 12 23:01:22.806745 systemd[1]: Reached target basic.target - Basic System. Jun 12 23:01:22.816809 systemd[1]: Starting systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT... Jun 12 23:01:22.952727 systemd-fsck[1371]: ROOT: clean, 15/6361680 files, 408771/6359552 blocks Jun 12 23:01:22.960893 systemd[1]: Finished systemd-fsck-root.service - File System Check on /dev/disk/by-label/ROOT. Jun 12 23:01:22.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:22.968191 systemd[1]: Mounting sysroot.mount - /sysroot... Jun 12 23:01:23.256914 kernel: EXT4-fs (sda9): mounted filesystem 8601c2b7-eb5d-4000-91a6-2487c2ae35d0 r/w with ordered data mode. Quota mode: none. Jun 12 23:01:23.257584 systemd[1]: Mounted sysroot.mount - /sysroot. Jun 12 23:01:23.261917 systemd[1]: Reached target initrd-root-fs.target - Initrd Root File System. Jun 12 23:01:23.284180 systemd[1]: Mounting sysroot-usr.mount - /sysroot/usr... Jun 12 23:01:23.288765 systemd[1]: Starting flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent... Jun 12 23:01:23.297866 systemd[1]: ignition-remount-sysroot.service - Remount /sysroot read-write for Ignition skipped, unmet condition check ConditionPathIsReadWrite=!/sysroot Jun 12 23:01:23.297896 systemd[1]: Reached target ignition-diskful.target - Ignition Boot Disk Setup. Jun 12 23:01:23.322561 systemd[1]: Mounted sysroot-usr.mount - /sysroot/usr. Jun 12 23:01:23.330919 systemd[1]: Starting initrd-setup-root.service - Root filesystem setup... Jun 12 23:01:23.647930 systemd-tmpfiles[1410]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:1: Duplicate line for path "/sysroot/var", ignoring. Jun 12 23:01:23.647953 systemd-tmpfiles[1410]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:7: Duplicate line for path "/sysroot/var/empty", ignoring. Jun 12 23:01:23.648009 systemd-tmpfiles[1410]: /sysroot/usr/lib/tmpfiles.d/base_image_var.conf:28: Duplicate line for path "/sysroot/var/log", ignoring. Jun 12 23:01:24.146102 coreos-metadata[1390]: Jun 12 23:01:24.146 INFO Fetching http://168.63.129.16/?comp=versions: Attempt #1 Jun 12 23:01:24.153366 coreos-metadata[1390]: Jun 12 23:01:24.153 INFO Fetch successful Jun 12 23:01:24.153366 coreos-metadata[1390]: Jun 12 23:01:24.153 INFO Fetching http://169.254.169.254/metadata/instance/compute/name?api-version=2017-08-01&format=text: Attempt #1 Jun 12 23:01:24.166496 coreos-metadata[1390]: Jun 12 23:01:24.166 INFO Fetch successful Jun 12 23:01:24.170453 coreos-metadata[1390]: Jun 12 23:01:24.166 INFO wrote hostname ci-4722.0.0-a-a1eba1ae39 to /sysroot/etc/hostname Jun 12 23:01:24.178457 systemd[1]: Finished flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. Jun 12 23:01:24.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:24.194349 kernel: kauditd_printk_skb: 31 callbacks suppressed Jun 12 23:01:24.194367 kernel: audit: type=1130 audit(1781305284.183:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:24.850961 kernel: loop1: detected capacity change from 0 to 44152 Jun 12 23:01:24.903806 kernel: loop1: p1 p2 p3 Jun 12 23:01:25.602225 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:25.602283 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:25.607281 kernel: device-mapper: table: 254:1: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:25.610613 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:25.610656 systemd-confext[1471]: device-mapper: reload ioctl on loop1p1-14-verity (254:1) failed: Invalid argument Jun 12 23:01:25.671800 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:25.743813 kernel: erofs: (device dm-1): mounted with root inode @ nid 40. Jun 12 23:01:25.767563 kernel: loop2: detected capacity change from 0 to 44152 Jun 12 23:01:25.767607 kernel: loop2: p1 p2 p3 Jun 12 23:01:25.780533 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:25.780571 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:25.785355 kernel: device-mapper: table: 254:1: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:25.789919 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:25.789966 (sd-merge)[1481]: device-mapper: reload ioctl on loop2p1-18-verity (254:1) failed: Invalid argument Jun 12 23:01:25.804812 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:25.817795 kernel: erofs: (device dm-1): mounted with root inode @ nid 40. Jun 12 23:01:25.818034 (sd-merge)[1481]: Using extensions '00-flatcar-default.raw'. Jun 12 23:01:25.818713 (sd-merge)[1481]: Merged extensions into '/sysroot/etc'. Jun 12 23:01:25.827159 initrd-setup-root[1488]: /etc 00-flatcar-default Fri 2026-06-12 23:01:19 UTC Jun 12 23:01:25.833854 systemd[1]: Finished initrd-setup-root.service - Root filesystem setup. Jun 12 23:01:25.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:25.840569 systemd[1]: Starting ignition-mount.service - Ignition (mount)... Jun 12 23:01:25.862439 kernel: audit: type=1130 audit(1781305285.837:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:25.868042 systemd[1]: Starting sysroot-boot.service - /sysroot/boot... Jun 12 23:01:25.898868 ignition[1497]: INFO : Ignition 2.24.0 Jun 12 23:01:25.906247 ignition[1497]: INFO : Stage: mount Jun 12 23:01:25.906247 ignition[1497]: INFO : no config dir at "/usr/lib/ignition/base.d" Jun 12 23:01:25.906247 ignition[1497]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Jun 12 23:01:25.906247 ignition[1497]: INFO : mount: mount passed Jun 12 23:01:25.906247 ignition[1497]: INFO : Ignition finished successfully Jun 12 23:01:25.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:25.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:25.902382 systemd[1]: Finished sysroot-boot.service - /sysroot/boot. Jun 12 23:01:25.959674 kernel: audit: type=1130 audit(1781305285.908:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:25.910099 systemd[1]: Finished ignition-mount.service - Ignition (mount). Jun 12 23:01:25.963664 kernel: audit: type=1130 audit(1781305285.924:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:25.945905 systemd[1]: Starting ignition-files.service - Ignition (files)... Jun 12 23:01:25.971294 systemd[1]: Mounting oem.mount - /oem... Jun 12 23:01:25.999524 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 (8:6) scanned by mount (1512) Jun 12 23:01:25.999564 kernel: BTRFS info (device sda6): first mount of filesystem 9b374379-5d9b-4c56-8f32-e7ff3e1592df Jun 12 23:01:26.003942 kernel: BTRFS info (device sda6): using crc32c (crc32c-generic) checksum algorithm Jun 12 23:01:26.016005 kernel: BTRFS info (device sda6): turning on async discard Jun 12 23:01:26.016044 kernel: BTRFS info (device sda6): enabling free space tree Jun 12 23:01:26.017763 systemd[1]: Mounted oem.mount - /oem. Jun 12 23:01:26.023861 systemd[1]: Mounting sysroot-oem.mount - /sysroot/oem... Jun 12 23:01:26.038082 systemd[1]: Mounted sysroot-oem.mount - /sysroot/oem. Jun 12 23:01:26.063901 ignition[1532]: INFO : Ignition 2.24.0 Jun 12 23:01:26.067132 ignition[1532]: INFO : Stage: files Jun 12 23:01:26.067132 ignition[1532]: INFO : no config dir at "/usr/lib/ignition/base.d" Jun 12 23:01:26.067132 ignition[1532]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Jun 12 23:01:26.078836 ignition[1532]: DEBUG : files: compiled without relabeling support, skipping Jun 12 23:01:26.078836 ignition[1532]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jun 12 23:01:26.078836 ignition[1532]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jun 12 23:01:26.094062 ignition[1532]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jun 12 23:01:26.099405 ignition[1532]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jun 12 23:01:26.104956 ignition[1532]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jun 12 23:01:26.104956 ignition[1532]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/etc/flatcar/update.conf" Jun 12 23:01:26.104956 ignition[1532]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jun 12 23:01:26.104956 ignition[1532]: INFO : files: createResultFile: createFiles: op(4): [started] writing file "/sysroot/etc/.ignition-result.json" Jun 12 23:01:26.104956 ignition[1532]: INFO : files: createResultFile: createFiles: op(4): [finished] writing file "/sysroot/etc/.ignition-result.json" Jun 12 23:01:26.104956 ignition[1532]: INFO : files: files passed Jun 12 23:01:26.104956 ignition[1532]: INFO : Ignition finished successfully Jun 12 23:01:26.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:26.099505 unknown[1532]: wrote ssh authorized keys file for user: core Jun 12 23:01:26.176469 kernel: audit: type=1130 audit(1781305286.114:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:26.110012 systemd[1]: Finished ignition-files.service - Ignition (files). Jun 12 23:01:26.118837 systemd[1]: Starting ignition-quench.service - Ignition (record completion)... Jun 12 23:01:26.161968 systemd[1]: Starting initrd-setup-root-after-ignition.service - Root filesystem completion... Jun 12 23:01:26.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:26.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:26.176179 systemd[1]: ignition-quench.service: Deactivated successfully. Jun 12 23:01:26.223006 kernel: audit: type=1130 audit(1781305286.190:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:26.181812 systemd[1]: Finished ignition-quench.service - Ignition (record completion). Jun 12 23:01:26.227361 kernel: audit: type=1131 audit(1781305286.190:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:26.241426 initrd-setup-root-after-ignition[1571]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jun 12 23:01:26.241426 initrd-setup-root-after-ignition[1571]: grep: /sysroot/usr/share/flatcar/enabled-sysext.conf: No such file or directory Jun 12 23:01:26.254409 initrd-setup-root-after-ignition[1575]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jun 12 23:01:26.264805 kernel: loop3: detected capacity change from 0 to 44152 Jun 12 23:01:26.267795 kernel: loop3: p1 p2 p3 Jun 12 23:01:26.281636 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:26.281680 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:26.286347 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:26.287806 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:26.290234 systemd-confext[1577]: device-mapper: reload ioctl on loop3p1-21-verity (254:2) failed: Invalid argument Jun 12 23:01:26.306317 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:26.323790 kernel: erofs: (device dm-2): mounted with root inode @ nid 40. Jun 12 23:01:26.352750 kernel: loop4: detected capacity change from 0 to 44152 Jun 12 23:01:26.352790 kernel: loop4: p1 p2 p3 Jun 12 23:01:26.367273 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:26.367303 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:26.374334 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:26.379759 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:26.380020 (sd-merge)[1585]: device-mapper: reload ioctl on loop4p1-25-verity (254:2) failed: Invalid argument Jun 12 23:01:26.392841 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:26.406819 kernel: erofs: (device dm-2): mounted with root inode @ nid 40. Jun 12 23:01:26.406930 (sd-merge)[1585]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Jun 12 23:01:26.535799 kernel: loop4: detected capacity change from 0 to 364432 Jun 12 23:01:26.617974 kernel: loop4: p1 p2 p3 Jun 12 23:01:27.036621 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:27.036673 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:27.041516 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:27.044905 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:27.045120 systemd-sysext[1593]: device-mapper: reload ioctl on loop4p1-29-verity (254:2) failed: Invalid argument Jun 12 23:01:27.055583 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:27.225798 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Jun 12 23:01:27.329822 kernel: loop5: detected capacity change from 0 to 142648 Jun 12 23:01:27.376803 kernel: loop5: p1 p2 p3 Jun 12 23:01:27.793854 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:27.793899 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:27.793908 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:27.801822 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:27.802049 systemd-sysext[1593]: device-mapper: reload ioctl on loop5p1-33-verity (254:2) failed: Invalid argument Jun 12 23:01:27.815800 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:27.872801 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Jun 12 23:01:27.910810 kernel: loop6: detected capacity change from 0 to 173960 Jun 12 23:01:27.958810 kernel: loop6: p1 p2 p3 Jun 12 23:01:28.536758 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:28.536843 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:28.541766 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:28.545018 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:28.545227 systemd-sysext[1593]: device-mapper: reload ioctl on loop6p1-37-verity (254:2) failed: Invalid argument Jun 12 23:01:28.557055 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:28.696799 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Jun 12 23:01:28.751798 kernel: loop7: detected capacity change from 0 to 364432 Jun 12 23:01:28.756795 kernel: loop7: p1 p2 p3 Jun 12 23:01:28.772463 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:28.772499 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:28.777359 kernel: device-mapper: table: 254:2: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:28.780657 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:28.780712 (sd-merge)[1617]: device-mapper: reload ioctl on loop7p1-41-verity (254:2) failed: Invalid argument Jun 12 23:01:28.797488 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:28.830997 kernel: erofs: (device dm-2): mounted with root inode @ nid 39. Jun 12 23:01:28.835792 kernel: loop1: detected capacity change from 0 to 142648 Jun 12 23:01:28.838791 kernel: loop1: p1 p2 p3 Jun 12 23:01:28.850651 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:28.850665 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:28.856506 kernel: device-mapper: table: 254:3: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:28.859997 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:28.860181 (sd-merge)[1617]: device-mapper: reload ioctl on loop1p1-45-verity (254:3) failed: Invalid argument Jun 12 23:01:28.871804 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:28.895796 kernel: erofs: (device dm-3): mounted with root inode @ nid 39. Jun 12 23:01:28.895842 kernel: loop3: detected capacity change from 0 to 173960 Jun 12 23:01:28.899872 kernel: loop3: p1 p2 p3 Jun 12 23:01:28.913369 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:28.913407 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:28.914985 kernel: device-mapper: table: 254:4: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:28.921687 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:28.921873 (sd-merge)[1617]: device-mapper: reload ioctl on loop3p1-49-verity (254:4) failed: Invalid argument Jun 12 23:01:28.939128 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:28.959807 kernel: erofs: (device dm-4): mounted with root inode @ nid 39. Jun 12 23:01:28.965390 (sd-merge)[1617]: Using extensions 'containerd-flatcar.raw', 'docker-flatcar.raw', 'oem-azure-4722.0.0.raw'. Jun 12 23:01:28.966233 (sd-merge)[1617]: Merged extensions into '/sysroot/usr'. Jun 12 23:01:28.977409 systemd[1]: Finished initrd-setup-root-after-ignition.service - Root filesystem completion. Jun 12 23:01:28.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:28.985914 systemd[1]: Starting initrd-parse-etc.service - Mountpoints Configured in the Real Root... Jun 12 23:01:29.009798 kernel: audit: type=1130 audit(1781305288.981:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.021949 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jun 12 23:01:29.023788 systemd[1]: Finished initrd-parse-etc.service - Mountpoints Configured in the Real Root. Jun 12 23:01:29.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.031869 systemd[1]: initrd-parse-etc.service: Triggering OnSuccess= dependencies. Jun 12 23:01:29.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.070979 kernel: audit: type=1130 audit(1781305289.030:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.033423 systemd[1]: Reached target initrd-fs.target - Initrd File Systems. Jun 12 23:01:29.083556 kernel: audit: type=1131 audit(1781305289.030:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.084953 systemd[1]: Starting dracut-mount.service - dracut mount hook... Jun 12 23:01:29.399090 systemd[1]: Finished dracut-mount.service - dracut mount hook. Jun 12 23:01:29.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.423507 systemd[1]: Starting dracut-pre-pivot.service - dracut pre-pivot and cleanup hook... Jun 12 23:01:29.435259 kernel: audit: type=1130 audit(1781305289.404:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.451000 systemd[1]: Finished dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Jun 12 23:01:29.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.474389 systemd[1]: Starting initrd-cleanup.service - Cleaning Up and Shutting Down Daemons... Jun 12 23:01:29.484664 kernel: audit: type=1130 audit(1781305289.455:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.496231 systemd[1]: Stopped target basic.target - Basic System. Jun 12 23:01:29.500368 systemd[1]: Stopped target ignition-diskful.target - Ignition Boot Disk Setup. Jun 12 23:01:29.508702 systemd[1]: Stopped target initrd-root-device.target - Initrd Root Device. Jun 12 23:01:29.519048 systemd[1]: Stopped target initrd-usr-fs.target - Initrd /usr File System. Jun 12 23:01:29.528245 systemd[1]: Stopped target nss-lookup.target - Host and Network Name Lookups. Jun 12 23:01:29.537882 systemd[1]: Stopped target paths.target - Path Units. Jun 12 23:01:29.546246 systemd[1]: Stopped target remote-cryptsetup.target - Remote Encrypted Volumes. Jun 12 23:01:29.554395 systemd[1]: Stopped target slices.target - Slice Units. Jun 12 23:01:29.563099 systemd[1]: Stopped target sockets.target - Socket Units. Jun 12 23:01:29.570296 systemd[1]: Stopped target sysinit.target - System Initialization. Jun 12 23:01:29.577966 systemd[1]: Stopped target local-fs.target - Local File Systems. Jun 12 23:01:29.586372 systemd[1]: Stopped target swap.target - Swaps. Jun 12 23:01:29.594281 systemd[1]: Stopped target timers.target - Timer Units. Jun 12 23:01:29.601796 systemd[1]: iscsid.socket: Deactivated successfully. Jun 12 23:01:29.601952 systemd[1]: Closed iscsid.socket - Open-iSCSI iscsid Socket. Jun 12 23:01:29.613417 systemd[1]: iscsiuio.socket: Deactivated successfully. Jun 12 23:01:29.613523 systemd[1]: Closed iscsiuio.socket - Open-iSCSI iscsiuio Socket. Jun 12 23:01:29.624378 systemd[1]: systemd-coredump.socket: Deactivated successfully. Jun 12 23:01:29.624468 systemd[1]: Closed systemd-coredump.socket - Process Core Dump Socket. Jun 12 23:01:29.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.632367 systemd[1]: systemd-journald-audit.socket: Deactivated successfully. Jun 12 23:01:29.632497 systemd[1]: Closed systemd-journald-audit.socket - Journal Audit Socket. Jun 12 23:01:29.675555 kernel: audit: type=1131 audit(1781305289.645:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.641400 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jun 12 23:01:29.641544 systemd[1]: Stopped dracut-pre-pivot.service - dracut pre-pivot and cleanup hook. Jun 12 23:01:29.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.663546 systemd[1]: Stopped target remote-fs.target - Remote File Systems. Jun 12 23:01:29.671436 systemd[1]: Stopped target remote-fs-pre.target - Preparation for Remote File Systems. Jun 12 23:01:29.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.729017 kernel: audit: type=1131 audit(1781305289.687:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.680632 systemd[1]: dracut-mount.service: Deactivated successfully. Jun 12 23:01:29.734025 kernel: audit: type=1131 audit(1781305289.711:57): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.680796 systemd[1]: Stopped dracut-mount.service - dracut mount hook. Jun 12 23:01:29.704865 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jun 12 23:01:29.704962 systemd[1]: Stopped dracut-pre-mount.service - dracut pre-mount hook. Jun 12 23:01:29.731502 systemd[1]: Stopped target cryptsetup.target - Local Encrypted Volumes. Jun 12 23:01:29.738607 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jun 12 23:01:29.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.738953 systemd[1]: Stopped systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Jun 12 23:01:29.748683 systemd[1]: Stopped target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Jun 12 23:01:29.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.823209 kernel: audit: type=1131 audit(1781305289.776:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.757514 systemd[1]: clevis-luks-askpass.path: Deactivated successfully. Jun 12 23:01:29.827482 kernel: audit: type=1131 audit(1781305289.805:59): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.757856 systemd[1]: Stopped clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Jun 12 23:01:29.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.768805 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jun 12 23:01:29.768990 systemd[1]: Stopped dracut-initqueue.service - dracut initqueue hook. Jun 12 23:01:29.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.875367 kernel: audit: type=1131 audit(1781305289.830:60): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.797578 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jun 12 23:01:29.880519 kernel: audit: type=1131 audit(1781305289.858:61): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-metadata-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.797720 systemd[1]: Stopped initrd-setup-root-after-ignition.service - Root filesystem completion. Jun 12 23:01:29.823979 systemd[1]: ignition-files.service: Deactivated successfully. Jun 12 23:01:29.824086 systemd[1]: Stopped ignition-files.service - Ignition (files). Jun 12 23:01:29.851509 systemd[1]: flatcar-metadata-hostname.service: Deactivated successfully. Jun 12 23:01:29.851615 systemd[1]: Stopped flatcar-metadata-hostname.service - Flatcar Metadata Hostname Agent. Jun 12 23:01:29.918763 ignition[1692]: INFO : Ignition 2.24.0 Jun 12 23:01:29.918763 ignition[1692]: INFO : Stage: umount Jun 12 23:01:29.918763 ignition[1692]: INFO : no config dir at "/usr/lib/ignition/base.d" Jun 12 23:01:29.918763 ignition[1692]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/azure" Jun 12 23:01:29.918763 ignition[1692]: INFO : umount: umount passed Jun 12 23:01:29.918763 ignition[1692]: INFO : Ignition finished successfully Jun 12 23:01:29.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.953000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.974000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.882003 systemd[1]: Stopping ignition-mount.service - Ignition (mount)... Jun 12 23:01:29.984598 kernel: audit: type=1131 audit(1781305289.928:62): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.904913 systemd[1]: Stopping sysroot-boot.service - /sysroot/boot... Jun 12 23:01:29.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.917834 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jun 12 23:01:29.917953 systemd[1]: Stopped systemd-modules-load.service - Load Kernel Modules. Jun 12 23:01:29.947441 systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully. Jun 12 23:01:30.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.947605 systemd[1]: Stopped systemd-tmpfiles-setup.service - Create System Files and Directories. Jun 12 23:01:30.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup-pre comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.958417 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jun 12 23:01:29.958523 systemd[1]: Stopped systemd-udev-trigger.service - Coldplug All udev Devices. Jun 12 23:01:29.967954 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jun 12 23:01:29.968108 systemd[1]: Stopped dracut-pre-trigger.service - dracut pre-trigger hook. Jun 12 23:01:30.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:29.978739 systemd[1]: ignition-mount.service: Deactivated successfully. Jun 12 23:01:29.980352 systemd[1]: Stopped ignition-mount.service - Ignition (mount). Jun 12 23:01:29.995551 systemd[1]: Stopped target network.target - Network. Jun 12 23:01:30.002614 systemd[1]: ignition-disks.service: Deactivated successfully. Jun 12 23:01:30.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.002678 systemd[1]: Stopped ignition-disks.service - Ignition (disks). Jun 12 23:01:30.014413 systemd[1]: ignition-setup-pre.service: Deactivated successfully. Jun 12 23:01:30.014464 systemd[1]: Stopped ignition-setup-pre.service - Ignition env setup. Jun 12 23:01:30.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.023512 systemd[1]: Stopping systemd-networkd.service - Network Management... Jun 12 23:01:30.030330 systemd[1]: Stopping systemd-resolved.service - Network Name Resolution... Jun 12 23:01:30.117000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.121000 audit: BPF prog-id=8 op=UNLOAD Jun 12 23:01:30.121000 audit: BPF prog-id=5 op=UNLOAD Jun 12 23:01:30.047626 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jun 12 23:01:30.051459 systemd[1]: systemd-resolved.service: Deactivated successfully. Jun 12 23:01:30.052436 systemd[1]: Stopped systemd-resolved.service - Network Name Resolution. Jun 12 23:01:30.075877 systemd[1]: systemd-networkd.service: Deactivated successfully. Jun 12 23:01:30.078534 systemd[1]: Stopped systemd-networkd.service - Network Management. Jun 12 23:01:30.095101 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jun 12 23:01:30.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.095871 systemd[1]: Finished initrd-cleanup.service - Cleaning Up and Shutting Down Daemons. Jun 12 23:01:30.110940 systemd[1]: sysroot-boot.service: Deactivated successfully. Jun 12 23:01:30.112486 systemd[1]: Stopped sysroot-boot.service - /sysroot/boot. Jun 12 23:01:30.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.130849 systemd[1]: Stopped target network-pre.target - Preparation for Network. Jun 12 23:01:30.137236 systemd[1]: systemd-networkd-resolve-hook.socket: Deactivated successfully. Jun 12 23:01:30.137289 systemd[1]: Closed systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Jun 12 23:01:30.150383 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jun 12 23:01:30.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.150428 systemd[1]: Closed systemd-networkd.socket - Network Management Netlink Socket. Jun 12 23:01:30.159404 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jun 12 23:01:30.249000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.159455 systemd[1]: Stopped initrd-setup-root.service - Root filesystem setup. Jun 12 23:01:30.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.273881 kernel: hv_netvsc 002248be-e385-0022-48be-e385002248be eth0: Data path switched from VF: enP52873s1 Jun 12 23:01:30.173915 systemd[1]: Stopping network-cleanup.service - Network Cleanup... Jun 12 23:01:30.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.180861 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jun 12 23:01:30.180907 systemd[1]: Stopped parse-ip-for-networkd.service - Write systemd-networkd units from cmdline. Jun 12 23:01:30.192433 systemd[1]: Stopping systemd-udevd.service - Rule-based Manager for Device Events and Files... Jun 12 23:01:30.220588 systemd[1]: systemd-udevd.service: Deactivated successfully. Jun 12 23:01:30.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.222827 systemd[1]: Stopped systemd-udevd.service - Rule-based Manager for Device Events and Files. Jun 12 23:01:30.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.231349 systemd[1]: systemd-udevd.service: Consumed 1.018s CPU time over 10.358s wall clock time. Jun 12 23:01:30.233538 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jun 12 23:01:30.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.233636 systemd[1]: Closed systemd-udevd-control.socket - udev Control Socket. Jun 12 23:01:30.243380 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jun 12 23:01:30.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.243428 systemd[1]: Stopped dracut-pre-udev.service - dracut pre-udev hook. Jun 12 23:01:30.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.253419 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jun 12 23:01:30.253469 systemd[1]: Stopped dracut-cmdline.service - dracut cmdline hook. Jun 12 23:01:30.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.262374 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jun 12 23:01:30.262426 systemd[1]: Stopped dracut-cmdline-ask.service - dracut ask for additional cmdline parameters. Jun 12 23:01:30.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:30.284937 systemd[1]: Starting initrd-udevadm-cleanup-db.service - Cleanup udev Database... Jun 12 23:01:30.299830 systemd[1]: systemd-network-generator.service: Deactivated successfully. Jun 12 23:01:30.299878 systemd[1]: Stopped systemd-network-generator.service - Generate Network Units from Kernel Command Line. Jun 12 23:01:30.308073 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jun 12 23:01:30.308122 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Jun 12 23:01:30.322466 systemd[1]: systemd-tmpfiles-setup-dev-early.service: Deactivated successfully. Jun 12 23:01:30.322514 systemd[1]: Stopped systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Jun 12 23:01:30.337637 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jun 12 23:01:30.337692 systemd[1]: Stopped kmod-static-nodes.service - Create List of Static Device Nodes. Jun 12 23:01:30.350029 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jun 12 23:01:30.350077 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jun 12 23:01:30.364325 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jun 12 23:01:30.365490 systemd[1]: Finished initrd-udevadm-cleanup-db.service - Cleanup udev Database. Jun 12 23:01:30.372578 systemd[1]: network-cleanup.service: Deactivated successfully. Jun 12 23:01:30.373300 systemd[1]: Stopped network-cleanup.service - Network Cleanup. Jun 12 23:01:30.386507 systemd[1]: Reached target initrd-switch-root.target - Switch Root. Jun 12 23:01:30.400950 systemd[1]: Starting initrd-switch-root.service - Switch Root... Jun 12 23:01:30.442100 systemd[1]: Switching root. Jun 12 23:01:30.624588 systemd-journald[565]: Journal stopped Jun 12 23:01:36.712359 systemd-journald[565]: Received SIGTERM from PID 1 (systemd). Jun 12 23:01:36.712392 kernel: SELinux: policy capability network_peer_controls=1 Jun 12 23:01:36.712406 kernel: SELinux: policy capability open_perms=1 Jun 12 23:01:36.712414 kernel: SELinux: policy capability extended_socket_class=1 Jun 12 23:01:36.712422 kernel: SELinux: policy capability always_check_network=0 Jun 12 23:01:36.712430 kernel: SELinux: policy capability cgroup_seclabel=1 Jun 12 23:01:36.712439 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jun 12 23:01:36.712448 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jun 12 23:01:36.712453 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jun 12 23:01:36.712461 kernel: SELinux: policy capability userspace_initial_context=0 Jun 12 23:01:36.712468 systemd[1]: Successfully loaded SELinux policy in 155.178ms. Jun 12 23:01:36.712481 systemd[1]: Relabeled /dev/, /dev/shm/, /run/ in 5.849ms. Jun 12 23:01:36.712490 systemd[1]: systemd 260.1 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +IPE +SMACK +SECCOMP -GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL +ELFUTILS -FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) Jun 12 23:01:36.712498 systemd[1]: Detected virtualization microsoft. Jun 12 23:01:36.712506 systemd[1]: Detected architecture arm64. Jun 12 23:01:36.712515 systemd[1]: Detected first boot. Jun 12 23:01:36.712524 systemd[1]: Initializing machine ID from random generator. Jun 12 23:01:36.712533 systemd[1]: Hostname set to . Jun 12 23:01:36.712541 zram_generator::config[1993]: No configuration found. Jun 12 23:01:36.712550 kernel: NET: Registered PF_VSOCK protocol family Jun 12 23:01:36.712556 systemd[1]: Applying preset policy. Jun 12 23:01:36.712564 systemd[1]: Populated /etc with preset unit settings. Jun 12 23:01:36.712570 kernel: kauditd_printk_skb: 31 callbacks suppressed Jun 12 23:01:36.712577 kernel: audit: type=1334 audit(1781305295.693:94): prog-id=10 op=LOAD Jun 12 23:01:36.712584 kernel: audit: type=1334 audit(1781305295.693:95): prog-id=2 op=UNLOAD Jun 12 23:01:36.712591 kernel: audit: type=1334 audit(1781305295.693:96): prog-id=11 op=LOAD Jun 12 23:01:36.712598 kernel: audit: type=1334 audit(1781305295.693:97): prog-id=12 op=LOAD Jun 12 23:01:36.712607 kernel: audit: type=1334 audit(1781305295.693:98): prog-id=3 op=UNLOAD Jun 12 23:01:36.712614 kernel: audit: type=1334 audit(1781305295.693:99): prog-id=4 op=UNLOAD Jun 12 23:01:36.712620 kernel: audit: type=1334 audit(1781305295.693:100): prog-id=13 op=LOAD Jun 12 23:01:36.712626 kernel: audit: type=1334 audit(1781305295.693:101): prog-id=10 op=UNLOAD Jun 12 23:01:36.712632 kernel: audit: type=1334 audit(1781305295.693:102): prog-id=14 op=LOAD Jun 12 23:01:36.712638 kernel: audit: type=1334 audit(1781305295.693:103): prog-id=15 op=LOAD Jun 12 23:01:36.712648 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jun 12 23:01:36.712654 systemd[1]: Stopped initrd-switch-root.service - Switch Root. Jun 12 23:01:36.712663 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jun 12 23:01:36.712670 systemd[1]: Created slice system-addon\x2dconfig.slice - Slice /system/addon-config. Jun 12 23:01:36.712677 systemd[1]: Created slice system-addon\x2drun.slice - Slice /system/addon-run. Jun 12 23:01:36.712683 systemd[1]: Created slice system-getty.slice - Slice /system/getty. Jun 12 23:01:36.712692 systemd[1]: Created slice system-modprobe.slice - Slice /system/modprobe. Jun 12 23:01:36.712699 systemd[1]: Created slice system-serial\x2dgetty.slice - Slice /system/serial-getty. Jun 12 23:01:36.712706 systemd[1]: Created slice system-system\x2dcloudinit.slice - Slice /system/system-cloudinit. Jun 12 23:01:36.712712 systemd[1]: Created slice system-systemd\x2dfsck.slice - Slice /system/systemd-fsck. Jun 12 23:01:36.712719 systemd[1]: Created slice user.slice - User and Session Slice. Jun 12 23:01:36.712725 systemd[1]: Started clevis-luks-askpass.path - Forward Password Requests to Clevis Directory Watch. Jun 12 23:01:36.712732 systemd[1]: Started systemd-ask-password-console.path - Dispatch Password Requests to Console Directory Watch. Jun 12 23:01:36.712739 systemd[1]: Started systemd-ask-password-wall.path - Forward Password Requests to Wall Directory Watch. Jun 12 23:01:36.712745 systemd[1]: Set up automount boot.automount - Boot partition Automount Point. Jun 12 23:01:36.712753 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount - Arbitrary Executable File Formats File System Automount Point. Jun 12 23:01:36.712759 systemd[1]: Expecting device dev-disk-by\x2dlabel-OEM.device - /dev/disk/by-label/OEM... Jun 12 23:01:36.712765 systemd[1]: Expecting device dev-ptp_hyperv.device - /dev/ptp_hyperv... Jun 12 23:01:36.712772 systemd[1]: Expecting device dev-ttyAMA0.device - /dev/ttyAMA0... Jun 12 23:01:36.712789 systemd[1]: Reached target cryptsetup-pre.target - Local Encrypted Volumes (Pre). Jun 12 23:01:36.712796 systemd[1]: Reached target cryptsetup.target - Local Encrypted Volumes. Jun 12 23:01:36.712803 systemd[1]: Reached target imports.target - Image Downloads. Jun 12 23:01:36.712810 systemd[1]: Stopped target initrd-switch-root.target - Switch Root. Jun 12 23:01:36.712816 systemd[1]: Stopped target initrd-fs.target - Initrd File Systems. Jun 12 23:01:36.712822 systemd[1]: Stopped target initrd-root-fs.target - Initrd Root File System. Jun 12 23:01:36.712829 systemd[1]: Reached target integritysetup.target - Local Integrity Protected Volumes. Jun 12 23:01:36.712836 systemd[1]: Reached target remote-cryptsetup.target - Remote Encrypted Volumes. Jun 12 23:01:36.712843 systemd[1]: Reached target remote-fs.target - Remote File Systems. Jun 12 23:01:36.712849 systemd[1]: Reached target remote-integritysetup.target - Remote Integrity Protected Volumes. Jun 12 23:01:36.712855 systemd[1]: Reached target remote-veritysetup.target - Remote Verity Protected Volumes. Jun 12 23:01:36.712864 systemd[1]: Reached target slices.target - Slice Units. Jun 12 23:01:36.712870 systemd[1]: Reached target swap.target - Swaps. Jun 12 23:01:36.712877 systemd[1]: Reached target veritysetup.target - Local Verity Protected Volumes. Jun 12 23:01:36.712883 systemd[1]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Jun 12 23:01:36.712890 systemd[1]: Listening on systemd-coredump.socket - Process Core Dump Socket. Jun 12 23:01:36.712896 systemd[1]: Listening on systemd-creds.socket - Credential Encryption/Decryption. Jun 12 23:01:36.712903 systemd[1]: Listening on systemd-factory-reset.socket - Factory Reset Management. Jun 12 23:01:36.712911 systemd[1]: Listening on systemd-journald-audit.socket - Journal Audit Socket. Jun 12 23:01:36.712917 systemd[1]: Listening on systemd-mountfsd.socket - DDI File System Mounter Socket. Jun 12 23:01:36.712924 systemd[1]: Listening on systemd-mute-console.socket - Console Output Muting Service Socket. Jun 12 23:01:36.712930 systemd[1]: Listening on systemd-networkd-resolve-hook.socket - Network Management Resolve Hook Socket. Jun 12 23:01:36.712937 systemd[1]: Listening on systemd-networkd-varlink-metrics.socket - Network Management Metrics Varlink Socket. Jun 12 23:01:36.712943 systemd[1]: Listening on systemd-networkd-varlink.socket - Network Management Varlink Socket. Jun 12 23:01:36.712951 systemd[1]: Listening on systemd-networkd.socket - Network Management Netlink Socket. Jun 12 23:01:36.712958 systemd[1]: Listening on systemd-nsresourced.socket - Namespace Resource Manager Socket. Jun 12 23:01:36.712964 systemd[1]: Listening on systemd-oomd.socket - Userspace Out-Of-Memory (OOM) Killer Socket. Jun 12 23:01:36.712971 systemd[1]: Listening on systemd-repart.socket - Disk Repartitioning Service Socket. Jun 12 23:01:36.712977 systemd[1]: Listening on systemd-resolved-monitor.socket - Resolve Monitor Varlink Socket. Jun 12 23:01:36.712983 systemd[1]: Listening on systemd-resolved-varlink.socket - Resolve Service Varlink Socket. Jun 12 23:01:36.712991 systemd[1]: Listening on systemd-udevd-control.socket - udev Control Socket. Jun 12 23:01:36.712997 systemd[1]: Listening on systemd-udevd-varlink.socket - udev Varlink Socket. Jun 12 23:01:36.713004 systemd[1]: Listening on systemd-userdbd.socket - User Database Manager Socket. Jun 12 23:01:36.713010 systemd[1]: Mounting dev-hugepages.mount - Huge Pages File System... Jun 12 23:01:36.713016 systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue File System... Jun 12 23:01:36.713023 systemd[1]: Mounting media.mount - External Media Directory... Jun 12 23:01:36.713029 systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug File System... Jun 12 23:01:36.713036 systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace File System... Jun 12 23:01:36.713043 systemd[1]: tmp.mount: x-systemd.graceful-option=usrquota specified, but option is not available, suppressing. Jun 12 23:01:36.713051 systemd[1]: Mounting tmp.mount - Temporary Directory /tmp... Jun 12 23:01:36.713058 systemd[1]: var-lib-machines.mount - Virtual Machine and Container Storage (Compatibility) skipped, unmet condition check ConditionPathExists=/var/lib/machines.raw Jun 12 23:01:36.713064 systemd[1]: Reached target machines.target - Virtual Machines and Containers. Jun 12 23:01:36.713071 systemd[1]: Starting flatcar-tmpfiles.service - Create missing system files... Jun 12 23:01:36.713077 systemd[1]: ignition-delete-config.service - Ignition (delete config) skipped, no trigger condition checks were met. Jun 12 23:01:36.713085 systemd[1]: Starting kmod-static-nodes.service - Create List of Static Device Nodes... Jun 12 23:01:36.713092 systemd[1]: Starting modprobe@configfs.service - Load Kernel Module configfs... Jun 12 23:01:36.713098 systemd[1]: modprobe@drm.service - Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm Jun 12 23:01:36.713104 systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel Module efi_pstore... Jun 12 23:01:36.713111 systemd[1]: Starting modprobe@fuse.service - Load Kernel Module fuse... Jun 12 23:01:36.713117 systemd[1]: setup-nsswitch.service - Create /etc/nsswitch.conf skipped, unmet condition check ConditionPathExists=!/etc/nsswitch.conf Jun 12 23:01:36.713124 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jun 12 23:01:36.713131 systemd[1]: Stopped systemd-fsck-root.service - File System Check on Root Device. Jun 12 23:01:36.713137 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jun 12 23:01:36.713143 systemd[1]: Stopped systemd-fsck-usr.service. Jun 12 23:01:36.713150 systemd[1]: systemd-hibernate-clear.service - Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67 Jun 12 23:01:36.713157 systemd[1]: Starting systemd-journald.service - Journal Service... Jun 12 23:01:36.713163 kernel: fuse: init (API version 7.41) Jun 12 23:01:36.713170 systemd[1]: Starting systemd-modules-load.service - Load Kernel Modules... Jun 12 23:01:36.713176 systemd[1]: Starting systemd-network-generator.service - Generate Network Units from Kernel Command Line... Jun 12 23:01:36.713182 systemd[1]: Reached target time-set.target - System Time Set. Jun 12 23:01:36.713189 systemd[1]: Starting systemd-remount-fs.service - Remount Root and Kernel File Systems... Jun 12 23:01:36.713210 systemd-journald[2070]: Collecting audit messages is enabled. Jun 12 23:01:36.713226 systemd-journald[2070]: Journal started Jun 12 23:01:36.713241 systemd-journald[2070]: Runtime Journal (/run/log/journal/cb17fd908b8846c7850d055fab74a986) is 8M, max 78.3M, 70.3M free. Jun 12 23:01:36.171000 audit[1]: EVENT_LISTENER pid=1 uid=0 auid=4294967295 tty=(none) ses=4294967295 subj=system_u:system_r:kernel_t:s0 comm="systemd" exe="/usr/lib/systemd/systemd" nl-mcgrp=1 op=connect res=1 Jun 12 23:01:36.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.625000 audit: BPF prog-id=18 op=UNLOAD Jun 12 23:01:36.625000 audit: BPF prog-id=17 op=UNLOAD Jun 12 23:01:36.625000 audit: BPF prog-id=19 op=LOAD Jun 12 23:01:36.625000 audit: BPF prog-id=20 op=LOAD Jun 12 23:01:36.625000 audit: BPF prog-id=21 op=LOAD Jun 12 23:01:36.708000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jun 12 23:01:36.708000 audit[2070]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=5 a1=ffffe779fc90 a2=4000 a3=0 items=0 ppid=1 pid=2070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:01:36.708000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jun 12 23:01:35.626602 systemd[1]: Queued start job for default target multi-user.target. Jun 12 23:01:35.708284 systemd[1]: Unnecessary job was removed for dev-sda6.device - /dev/sda6. Jun 12 23:01:35.708718 systemd[1]: systemd-journald.service: Deactivated successfully. Jun 12 23:01:35.813101 systemd[1]: systemd-journald.service: Consumed 2.555s CPU time over 16.827s wall clock time. Jun 12 23:01:36.690586 systemd-modules-load[2074]: Using 2 probe threads Jun 12 23:01:36.723490 systemd[1]: Starting systemd-udev-load-credentials.service - Load udev Rules from Credentials... Jun 12 23:01:36.741196 systemd[1]: Starting systemd-udev-trigger.service - Coldplug All udev Devices... Jun 12 23:01:36.754222 systemd[1]: Started systemd-journald.service - Journal Service. Jun 12 23:01:36.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.755916 systemd[1]: Mounted dev-hugepages.mount - Huge Pages File System. Jun 12 23:01:36.760528 systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue File System. Jun 12 23:01:36.765492 systemd[1]: Mounted media.mount - External Media Directory. Jun 12 23:01:36.771726 systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File System. Jun 12 23:01:36.776708 systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace File System. Jun 12 23:01:36.781582 systemd[1]: Mounted tmp.mount - Temporary Directory /tmp. Jun 12 23:01:36.789861 systemd[1]: Finished kmod-static-nodes.service - Create List of Static Device Nodes. Jun 12 23:01:36.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.796561 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jun 12 23:01:36.797817 systemd[1]: Finished modprobe@configfs.service - Load Kernel Module configfs. Jun 12 23:01:36.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.803670 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jun 12 23:01:36.803910 systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel Module efi_pstore. Jun 12 23:01:36.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.807000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.809370 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jun 12 23:01:36.809568 systemd[1]: Finished modprobe@fuse.service - Load Kernel Module fuse. Jun 12 23:01:36.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.814775 systemd[1]: Finished systemd-modules-load.service - Load Kernel Modules. Jun 12 23:01:36.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.819736 systemd[1]: Finished systemd-network-generator.service - Generate Network Units from Kernel Command Line. Jun 12 23:01:36.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.826698 systemd[1]: Finished systemd-remount-fs.service - Remount Root and Kernel File Systems. Jun 12 23:01:36.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.833885 systemd[1]: Finished systemd-udev-load-credentials.service - Load udev Rules from Credentials. Jun 12 23:01:36.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.846727 systemd[1]: Reached target network-pre.target - Preparation for Network. Jun 12 23:01:36.852075 systemd[1]: Listening on systemd-importd.socket - Disk Image Download Service Socket. Jun 12 23:01:36.858846 systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE Control File System... Jun 12 23:01:36.871215 systemd[1]: Mounting sys-kernel-config.mount - Kernel Configuration File System... Jun 12 23:01:36.876968 systemd[1]: remount-root.service - Remount Root File System skipped, unmet condition check ConditionPathIsReadWrite=!/ Jun 12 23:01:36.877058 systemd[1]: Reached target local-fs.target - Local File Systems. Jun 12 23:01:36.883008 systemd[1]: Listening on systemd-sysext.socket - System Extension Image Management. Jun 12 23:01:36.889293 systemd[1]: systemd-binfmt.service - Set Up Additional Binary Formats skipped, no trigger condition checks were met. Jun 12 23:01:36.890428 systemd[1]: Starting systemd-confext.service - Merge System Configuration Images into /etc/... Jun 12 23:01:36.905522 systemd[1]: Starting systemd-hwdb-update.service - Rebuild Hardware Database... Jun 12 23:01:36.911976 systemd[1]: Starting systemd-journal-flush.service - Flush Journal to Persistent Storage... Jun 12 23:01:36.917044 systemd[1]: systemd-pstore.service - Platform Persistent Storage Archival skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/fs/pstore Jun 12 23:01:36.925798 systemd[1]: Starting systemd-random-seed.service - Load/Save OS Random Seed... Jun 12 23:01:36.931139 systemd[1]: Starting systemd-sysctl.service - Apply Kernel Variables... Jun 12 23:01:36.938924 systemd[1]: Starting systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully... Jun 12 23:01:36.946828 systemd[1]: Starting systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials... Jun 12 23:01:36.954063 systemd[1]: Finished systemd-udev-trigger.service - Coldplug All udev Devices. Jun 12 23:01:36.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.960029 systemd[1]: Mounted sys-fs-fuse-connections.mount - FUSE Control File System. Jun 12 23:01:36.965433 systemd[1]: Mounted sys-kernel-config.mount - Kernel Configuration File System. Jun 12 23:01:36.973395 systemd[1]: Finished flatcar-tmpfiles.service - Create missing system files. Jun 12 23:01:36.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.981885 systemd[1]: Finished systemd-random-seed.service - Load/Save OS Random Seed. Jun 12 23:01:36.984189 systemd-journald[2070]: Time spent on flushing to /var/log/journal/cb17fd908b8846c7850d055fab74a986 is 15.641ms for 1163 entries. Jun 12 23:01:36.984189 systemd-journald[2070]: System Journal (/var/log/journal/cb17fd908b8846c7850d055fab74a986) is 8M, max 2.2G, 2.2G free. Jun 12 23:01:36.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:36.994444 systemd[1]: Reached target first-boot-complete.target - First Boot Complete. Jun 12 23:01:37.032724 systemd-journald[2070]: Received client request to flush runtime journal. Jun 12 23:01:37.000366 systemd[1]: Starting systemd-machine-id-commit.service - Save Transient machine-id to Disk... Jun 12 23:01:37.032877 kernel: loop4: detected capacity change from 0 to 44152 Jun 12 23:01:37.026037 systemd[1]: Finished systemd-userdb-load-credentials.service - Load JSON user/group Records from Credentials. Jun 12 23:01:37.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdb-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.037318 systemd[1]: Finished systemd-journal-flush.service - Flush Journal to Persistent Storage. Jun 12 23:01:37.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.044829 kernel: loop4: p1 p2 p3 Jun 12 23:01:37.046855 systemd[1]: Finished systemd-sysctl.service - Apply Kernel Variables. Jun 12 23:01:37.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.086130 systemd[1]: Finished systemd-machine-id-commit.service - Save Transient machine-id to Disk. Jun 12 23:01:37.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.135805 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:37.135947 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:37.135973 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:37.143928 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:37.144158 systemd-confext[2127]: device-mapper: reload ioctl on loop4p1-53-verity (254:5) failed: Invalid argument Jun 12 23:01:37.149824 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:37.151741 systemd-tmpfiles[2125]: ACLs are not supported, ignoring. Jun 12 23:01:37.151764 systemd-tmpfiles[2125]: ACLs are not supported, ignoring. Jun 12 23:01:37.154309 systemd[1]: Finished systemd-tmpfiles-setup-dev-early.service - Create Static Device Nodes in /dev gracefully. Jun 12 23:01:37.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.161013 systemd[1]: Starting systemd-sysusers.service - Create System Users... Jun 12 23:01:37.340909 systemd[1]: Finished systemd-sysusers.service - Create System Users. Jun 12 23:01:37.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.347239 systemd[1]: Starting systemd-journalctl.socket - Journal Log Access Socket... Jun 12 23:01:37.353000 audit: BPF prog-id=22 op=LOAD Jun 12 23:01:37.353000 audit: BPF prog-id=23 op=LOAD Jun 12 23:01:37.353000 audit: BPF prog-id=24 op=LOAD Jun 12 23:01:37.356584 systemd[1]: Starting systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer... Jun 12 23:01:37.363000 audit: BPF prog-id=25 op=LOAD Jun 12 23:01:37.366924 systemd[1]: Starting systemd-resolved.service - Network Name Resolution... Jun 12 23:01:37.373821 systemd[1]: Starting systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev... Jun 12 23:01:37.380399 systemd[1]: Listening on systemd-journalctl.socket - Journal Log Access Socket. Jun 12 23:01:37.393422 systemd[1]: Starting modprobe@tun.service - Load Kernel Module tun... Jun 12 23:01:37.398000 audit: BPF prog-id=26 op=LOAD Jun 12 23:01:37.398000 audit: BPF prog-id=27 op=LOAD Jun 12 23:01:37.398000 audit: BPF prog-id=28 op=LOAD Jun 12 23:01:37.402931 systemd[1]: Starting systemd-userdbd.service - User Database Manager... Jun 12 23:01:37.405402 systemd-tmpfiles[2151]: ACLs are not supported, ignoring. Jun 12 23:01:37.405661 systemd-tmpfiles[2151]: ACLs are not supported, ignoring. Jun 12 23:01:37.409887 systemd[1]: Finished systemd-tmpfiles-setup-dev.service - Create Static Device Nodes in /dev. Jun 12 23:01:37.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.415508 systemd[1]: systemd-repart.service - Repartition Root Disk skipped, no trigger condition checks were met. Jun 12 23:01:37.423090 systemd[1]: proc-sys-fs-binfmt_misc.automount: Got automount request for /proc/sys/fs/binfmt_misc, triggered by 2153 ((systemd-userd)) Jun 12 23:01:37.480795 kernel: tun: Universal TUN/TAP device driver, 1.6 Jun 12 23:01:37.481047 systemd[1]: modprobe@tun.service: Deactivated successfully. Jun 12 23:01:37.481208 systemd[1]: Finished modprobe@tun.service - Load Kernel Module tun. Jun 12 23:01:37.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@tun comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@tun comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.487000 audit: BPF prog-id=29 op=LOAD Jun 12 23:01:37.488000 audit: BPF prog-id=30 op=LOAD Jun 12 23:01:37.488000 audit: BPF prog-id=31 op=LOAD Jun 12 23:01:37.491928 systemd[1]: Starting systemd-nsresourced.service - Namespace Resource Manager... Jun 12 23:01:37.553000 systemd[1]: Finished systemd-hwdb-update.service - Rebuild Hardware Database. Jun 12 23:01:37.556000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.556000 audit: BPF prog-id=7 op=UNLOAD Jun 12 23:01:37.556000 audit: BPF prog-id=6 op=UNLOAD Jun 12 23:01:37.556000 audit: BPF prog-id=32 op=LOAD Jun 12 23:01:37.556000 audit: BPF prog-id=33 op=LOAD Jun 12 23:01:37.559220 systemd[1]: Starting systemd-udevd.service - Rule-based Manager for Device Events and Files... Jun 12 23:01:37.743152 systemd-udevd[2158]: Using default interface naming scheme 'v260'. Jun 12 23:01:37.826633 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jun 12 23:01:37.827920 systemd[1]: Mounting proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System... Jun 12 23:01:37.860340 systemd[1]: Mounted proc-sys-fs-binfmt_misc.mount - Arbitrary Executable File Formats File System. Jun 12 23:01:37.897860 systemd[1]: Started systemd-userdbd.service - User Database Manager. Jun 12 23:01:37.898985 systemd-nsresourced[2156]: Not setting up BPF subsystem, as functionality has been disabled at compile time. Jun 12 23:01:37.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.904097 systemd[1]: Started systemd-nsresourced.service - Namespace Resource Manager. Jun 12 23:01:37.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-nsresourced comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.980445 systemd-oomd[2149]: No swap; memory pressure usage will be degraded Jun 12 23:01:37.981595 systemd[1]: Started systemd-oomd.service - Userspace Out-Of-Memory (OOM) Killer. Jun 12 23:01:37.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-oomd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:37.997684 systemd[1]: Started systemd-udevd.service - Rule-based Manager for Device Events and Files. Jun 12 23:01:38.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:38.002000 audit: BPF prog-id=34 op=LOAD Jun 12 23:01:38.006922 systemd[1]: Starting systemd-networkd.service - Network Management... Jun 12 23:01:38.011017 systemd-resolved[2150]: Positive Trust Anchors: Jun 12 23:01:38.012806 systemd-resolved[2150]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jun 12 23:01:38.012813 systemd-resolved[2150]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 Jun 12 23:01:38.012836 systemd-resolved[2150]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test Jun 12 23:01:38.045923 systemd-resolved[2150]: Using system hostname 'ci-4722.0.0-a-a1eba1ae39'. Jun 12 23:01:38.047089 systemd[1]: Started systemd-resolved.service - Network Name Resolution. Jun 12 23:01:38.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:38.055633 systemd[1]: Reached target nss-lookup.target - Host and Network Name Lookups. Jun 12 23:01:38.088975 systemd[1]: Condition check resulted in dev-ttyAMA0.device - /dev/ttyAMA0 being skipped. Jun 12 23:01:38.127652 systemd-networkd[2176]: lo: Link UP Jun 12 23:01:38.127665 systemd-networkd[2176]: lo: Gained carrier Jun 12 23:01:38.129952 systemd[1]: Started systemd-networkd.service - Network Management. Jun 12 23:01:38.135688 systemd-networkd[2176]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jun 12 23:01:38.135699 systemd-networkd[2176]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jun 12 23:01:38.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:38.140042 systemd[1]: Reached target network.target - Network. Jun 12 23:01:38.148878 systemd[1]: Starting systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd... Jun 12 23:01:38.156928 systemd[1]: Starting systemd-networkd-wait-online.service - Wait for Network to be Online... Jun 12 23:01:38.193856 kernel: hv_storvsc f8b3781a-1e82-4818-a1c3-63d806ec15bb: tag#111 cmd 0x85 status: scsi 0x2 srb 0x6 hv 0xc0000001 Jun 12 23:01:38.200858 kernel: mlx5_core ce89:00:02.0 enP52873s1: Link up Jun 12 23:01:38.229138 kernel: hv_netvsc 002248be-e385-0022-48be-e385002248be eth0: Data path switched to VF: enP52873s1 Jun 12 23:01:38.229955 systemd-networkd[2176]: enP52873s1: Link UP Jun 12 23:01:38.230083 systemd-networkd[2176]: eth0: Link UP Jun 12 23:01:38.230086 systemd-networkd[2176]: eth0: Gained carrier Jun 12 23:01:38.230100 systemd-networkd[2176]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jun 12 23:01:38.235149 systemd-networkd[2176]: enP52873s1: Gained carrier Jun 12 23:01:38.237715 systemd[1]: Finished systemd-networkd-persistent-storage.service - Enable Persistent Storage in systemd-networkd. Jun 12 23:01:38.245837 systemd-networkd[2176]: eth0: DHCPv4 address 10.0.0.35/24, gateway 10.0.0.1 acquired from 168.63.129.16 Jun 12 23:01:38.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-persistent-storage comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:38.254794 kernel: mousedev: PS/2 mouse device common for all mice Jun 12 23:01:38.263808 kernel: hv_vmbus: registering driver hv_balloon Jun 12 23:01:38.271125 kernel: hv_balloon: Using Dynamic Memory protocol version 2.0 Jun 12 23:01:38.271183 kernel: hv_balloon: Memory hot add disabled on ARM64 Jun 12 23:01:38.283828 kernel: hv_vmbus: registering driver hyperv_fb Jun 12 23:01:38.295384 kernel: hyperv_fb: Synthvid Version major 3, minor 5 Jun 12 23:01:38.295447 kernel: hyperv_fb: Screen resolution: 1024x768, Color depth: 32, Frame buffer size: 8388608 Jun 12 23:01:38.299882 kernel: Console: switching to colour dummy device 80x25 Jun 12 23:01:38.307008 kernel: Console: switching to colour frame buffer device 128x48 Jun 12 23:01:38.323632 systemd[1]: Condition check resulted in dev-ptp_hyperv.device - /dev/ptp_hyperv being skipped. Jun 12 23:01:38.374870 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jun 12 23:01:38.392818 kernel: MACsec IEEE 802.1AE Jun 12 23:01:38.462553 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device - Virtual_Disk OEM. Jun 12 23:01:38.471921 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM... Jun 12 23:01:38.483707 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jun 12 23:01:38.483983 systemd[1]: Stopped systemd-vconsole-setup.service - Virtual Console Setup. Jun 12 23:01:38.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:38.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:38.493884 systemd[1]: Starting systemd-vconsole-setup.service - Virtual Console Setup... Jun 12 23:01:38.539787 kernel: erofs: (device dm-5): mounted with root inode @ nid 40. Jun 12 23:01:38.541261 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service - File System Check on /dev/disk/by-label/OEM. Jun 12 23:01:38.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:38.568812 kernel: loop4: detected capacity change from 0 to 44152 Jun 12 23:01:38.572877 kernel: loop4: p1 p2 p3 Jun 12 23:01:38.584682 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.584763 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:38.585188 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:38.593577 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:38.594122 (sd-merge)[2309]: device-mapper: reload ioctl on loop4p1-58-verity (254:5) failed: Invalid argument Jun 12 23:01:38.603854 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.616798 kernel: erofs: (device dm-5): mounted with root inode @ nid 40. Jun 12 23:01:38.616900 (sd-merge)[2309]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Jun 12 23:01:38.619165 systemd[1]: Finished systemd-confext.service - Merge System Configuration Images into /etc/. Jun 12 23:01:38.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-confext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:38.626923 systemd[1]: Starting systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/... Jun 12 23:01:38.645803 kernel: loop4: detected capacity change from 0 to 173960 Jun 12 23:01:38.648797 kernel: loop4: p1 p2 p3 Jun 12 23:01:38.666516 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.666585 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:38.672259 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:38.676154 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:38.676250 systemd-sysext[2317]: device-mapper: reload ioctl on loop4p1-62-verity (254:5) failed: Invalid argument Jun 12 23:01:38.685818 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.706811 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Jun 12 23:01:38.729940 kernel: loop4: detected capacity change from 0 to 142648 Jun 12 23:01:38.733819 kernel: loop4: p1 p2 p3 Jun 12 23:01:38.747756 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.747834 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:38.747851 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:38.757850 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:38.757975 systemd-sysext[2317]: device-mapper: reload ioctl on loop4p1-67-verity (254:5) failed: Invalid argument Jun 12 23:01:38.763811 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.786943 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Jun 12 23:01:38.814842 kernel: loop4: detected capacity change from 0 to 364432 Jun 12 23:01:38.818800 kernel: loop4: p1 p2 p3 Jun 12 23:01:38.831265 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.831324 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:38.835902 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:38.839107 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:38.839309 systemd-sysext[2317]: device-mapper: reload ioctl on loop4p1-72-verity (254:5) failed: Invalid argument Jun 12 23:01:38.847826 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.869800 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Jun 12 23:01:38.896800 kernel: loop4: detected capacity change from 0 to 173960 Jun 12 23:01:38.900082 kernel: loop4: p1 p2 p3 Jun 12 23:01:38.916277 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.916340 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:38.921448 kernel: device-mapper: table: 254:5: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:38.924922 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:38.928824 (sd-merge)[2341]: device-mapper: reload ioctl on loop4p1-77-verity (254:5) failed: Invalid argument Jun 12 23:01:38.929710 systemd-vconsole-setup[2302]: Configuration of first virtual console was skipped, ignoring remaining ones. Jun 12 23:01:38.932617 systemd[1]: Finished systemd-vconsole-setup.service - Virtual Console Setup. Jun 12 23:01:38.939000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:38.941920 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.960823 kernel: erofs: (device dm-5): mounted with root inode @ nid 39. Jun 12 23:01:38.967528 kernel: loop5: detected capacity change from 0 to 142648 Jun 12 23:01:38.967585 kernel: loop5: p1 p2 p3 Jun 12 23:01:38.980381 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:38.980429 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:38.985383 kernel: device-mapper: table: 254:6: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:38.988706 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:38.988889 (sd-merge)[2341]: device-mapper: reload ioctl on loop5p1-81-verity (254:6) failed: Invalid argument Jun 12 23:01:38.995812 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:39.013896 kernel: erofs: (device dm-6): mounted with root inode @ nid 39. Jun 12 23:01:39.018811 kernel: loop6: detected capacity change from 0 to 364432 Jun 12 23:01:39.020799 kernel: loop6: p1 p2 p3 Jun 12 23:01:39.034633 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:39.034678 kernel: device-mapper: verity: Unrecognized verity feature request: root_hash_sig_key_desc Jun 12 23:01:39.039525 kernel: device-mapper: table: 254:7: verity: Unrecognized verity feature request (-EINVAL) Jun 12 23:01:39.042593 kernel: device-mapper: ioctl: error adding target to table Jun 12 23:01:39.042759 (sd-merge)[2341]: device-mapper: reload ioctl on loop6p1-85-verity (254:7) failed: Invalid argument Jun 12 23:01:39.052813 kernel: device-mapper: verity: sha256 using shash "sha256-ce" Jun 12 23:01:39.073843 kernel: erofs: (device dm-7): mounted with root inode @ nid 39. Jun 12 23:01:39.074443 (sd-merge)[2341]: Skipping extension refresh because no change was found, use --always-refresh=yes to always do a refresh. Jun 12 23:01:39.077076 systemd[1]: Finished systemd-sysext.service - Merge System Extension Images into /usr/ and /opt/. Jun 12 23:01:39.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:39.084127 systemd[1]: Starting systemd-tmpfiles-setup.service - Create System Files and Directories... Jun 12 23:01:39.109097 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/base_image_var.conf:29: Duplicate line for path "/var/log/audit", ignoring. Jun 12 23:01:39.111616 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/base_image_var_late.conf:44: Duplicate line for path "/var/log/audit", ignoring. Jun 12 23:01:39.111865 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/baselayout.conf:15: Duplicate line for path "/var", ignoring. Jun 12 23:01:39.111870 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/baselayout.conf:16: Duplicate line for path "/var/empty", ignoring. Jun 12 23:01:39.111880 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/baselayout.conf:21: Duplicate line for path "/var/log", ignoring. Jun 12 23:01:39.111980 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/dbus.conf:5: Duplicate line for path "/var/lib/dbus", ignoring. Jun 12 23:01:39.112200 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/nfs-utils.conf:2: Duplicate line for path "/var/lib/nfs/v4recovery", ignoring. Jun 12 23:01:39.137469 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/nfs-utils.conf:6: Duplicate line for path "/var/lib/nfs/sm", ignoring. Jun 12 23:01:39.137501 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/nfs-utils.conf:7: Duplicate line for path "/var/lib/nfs/sm.bak", ignoring. Jun 12 23:01:39.137686 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jun 12 23:01:39.138384 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/tpm2-tss-fapi.conf:2: Duplicate line for path "/var/lib/tpm2-tss/system/keystore", ignoring. Jun 12 23:01:39.138397 systemd-tmpfiles[2364]: ACLs are not supported, ignoring. Jun 12 23:01:39.138432 systemd-tmpfiles[2364]: ACLs are not supported, ignoring. Jun 12 23:01:39.138798 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/var.conf:10: Duplicate line for path "/var", ignoring. Jun 12 23:01:39.138810 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/var.conf:14: Duplicate line for path "/var/log", ignoring. Jun 12 23:01:39.138864 systemd-tmpfiles[2364]: /usr/lib/tmpfiles.d/var.conf:21: Duplicate line for path "/var/lib", ignoring. Jun 12 23:01:39.141235 systemd-tmpfiles[2364]: Detected autofs mount point '/boot' during canonicalization of 'boot'. Jun 12 23:01:39.141249 systemd-tmpfiles[2364]: Skipping /boot Jun 12 23:01:39.146739 systemd-tmpfiles[2364]: Detected autofs mount point '/boot' during canonicalization of 'boot'. Jun 12 23:01:39.146758 systemd-tmpfiles[2364]: Skipping /boot Jun 12 23:01:39.157877 systemd[1]: Finished systemd-tmpfiles-setup.service - Create System Files and Directories. Jun 12 23:01:39.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:39.165458 systemd[1]: Starting audit-rules.service - Load Audit Rules... Jun 12 23:01:39.177329 systemd[1]: Starting clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs... Jun 12 23:01:39.185016 systemd[1]: Starting ldconfig.service - Rebuild Dynamic Linker Cache... Jun 12 23:01:39.190582 systemd[1]: Starting systemd-journal-catalog-update.service - Rebuild Journal Catalog... Jun 12 23:01:39.197940 systemd[1]: Starting systemd-update-utmp.service - Record System Boot/Shutdown in UTMP... Jun 12 23:01:39.209000 audit[2374]: AUDIT1127 pid=2374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jun 12 23:01:39.215042 systemd[1]: Finished systemd-update-utmp.service - Record System Boot/Shutdown in UTMP. Jun 12 23:01:39.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:39.289836 systemd[1]: Finished systemd-journal-catalog-update.service - Rebuild Journal Catalog. Jun 12 23:01:39.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:01:39.359000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jun 12 23:01:39.359000 audit[2397]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff5174890 a2=420 a3=0 items=0 ppid=2370 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:01:39.359000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jun 12 23:01:39.361202 augenrules[2397]: No rules Jun 12 23:01:39.362342 systemd[1]: audit-rules.service: Deactivated successfully. Jun 12 23:01:39.362609 systemd[1]: Finished audit-rules.service - Load Audit Rules. Jun 12 23:01:39.510446 systemd[1]: Finished clean-ca-certificates.service - Clean up broken links in /etc/ssl/certs. Jun 12 23:01:39.516441 systemd[1]: update-ca-certificates.service - Update CA bundle at /etc/ssl/certs/ca-certificates.crt skipped, unmet condition check ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt Jun 12 23:01:39.682876 systemd-networkd[2176]: eth0: Gained IPv6LL Jun 12 23:01:39.684712 systemd[1]: Finished systemd-networkd-wait-online.service - Wait for Network to be Online. Jun 12 23:01:39.689929 systemd[1]: Reached target network-online.target - Network is Online. Jun 12 23:01:45.406432 ldconfig[2372]: ldconfig: /usr/lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jun 12 23:01:45.421184 systemd[1]: Finished ldconfig.service - Rebuild Dynamic Linker Cache. Jun 12 23:01:45.428531 systemd[1]: Starting systemd-update-done.service - Update is Completed... Jun 12 23:01:45.442822 systemd[1]: Finished systemd-update-done.service - Update is Completed. Jun 12 23:01:45.447857 systemd[1]: Reached target sysinit.target - System Initialization. Jun 12 23:01:45.452230 systemd[1]: Started motdgen.path - Watch for update engine configuration changes. Jun 12 23:01:45.457002 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path - Watch for a cloud-config at /var/lib/flatcar-install/user_data. Jun 12 23:01:45.462375 systemd[1]: Started logrotate.timer - Daily rotation of log files. Jun 12 23:01:45.466548 systemd[1]: Started mdadm.timer - Weekly check for MD array's redundancy information.. Jun 12 23:01:45.471832 systemd[1]: Started systemd-sysupdate-reboot.timer - Reboot Automatically After System Update. Jun 12 23:01:45.477625 systemd[1]: Started systemd-sysupdate.timer - Automatic System Update. Jun 12 23:01:45.482247 systemd[1]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of Temporary Directories. Jun 12 23:01:45.487755 systemd[1]: update-engine-stub.timer - Update Engine Stub Timer skipped, unmet condition check ConditionPathExists=/usr/.noupdate Jun 12 23:01:45.487791 systemd[1]: Reached target paths.target - Path Units. Jun 12 23:01:45.491468 systemd[1]: Reached target timers.target - Timer Units. Jun 12 23:01:45.496024 systemd[1]: Listening on dbus.socket - D-Bus System Message Bus Socket. Jun 12 23:01:45.501685 systemd[1]: Starting docker.socket - Docker Socket for the API... Jun 12 23:01:45.506768 systemd[1]: Listening on sshd-unix-local.socket - OpenSSH Server Socket (systemd-ssh-generator, AF_UNIX Local). Jun 12 23:01:45.515004 systemd[1]: Listening on sshd.socket - OpenSSH Server Socket. Jun 12 23:01:45.519342 systemd[1]: Listening on systemd-hostnamed.socket - Hostname Service Socket. Jun 12 23:01:45.524601 systemd[1]: Listening on systemd-logind-varlink.socket - User Login Management Varlink Socket. Jun 12 23:01:45.530151 systemd[1]: Listening on systemd-machined.socket - Virtual Machine and Container Registration Service Socket. Jun 12 23:01:45.536052 systemd[1]: Listening on docker.socket - Docker Socket for the API. Jun 12 23:01:45.541127 systemd[1]: Reached target sockets.target - Socket Units. Jun 12 23:01:45.545224 systemd[1]: Reached target basic.target - Basic System. Jun 12 23:01:45.549135 systemd[1]: addon-config@oem.service - Configure Addon /oem skipped, no trigger condition checks were met. Jun 12 23:01:45.549155 systemd[1]: addon-run@oem.service - Run Addon /oem skipped, no trigger condition checks were met. Jun 12 23:01:45.550690 systemd[1]: Starting chronyd.service - NTP client/server... Jun 12 23:01:45.563885 systemd[1]: Starting containerd.service - containerd container runtime... Jun 12 23:01:45.569045 systemd[1]: Starting dbus.service - D-Bus System Message Bus... Jun 12 23:01:45.575926 systemd[1]: Starting dracut-shutdown.service - Restore /run/initramfs on shutdown... Jun 12 23:01:45.592341 systemd[1]: Starting enable-oem-cloudinit.service - Enable cloudinit... Jun 12 23:01:45.600031 systemd[1]: Starting extend-filesystems.service - Extend Filesystems... Jun 12 23:01:45.600503 chronyd[2413]: chronyd version 4.8 starting (+CMDMON +REFCLOCK +RTC +PRIVDROP +SCFILTER -SIGND +NTS +SECHASH +IPV6 -DEBUG) Jun 12 23:01:45.605252 systemd[1]: flatcar-setup-environment.service - Modifies /etc/environment for CoreOS skipped, unmet condition check ConditionPathExists=/oem/bin/flatcar-setup-environment Jun 12 23:01:45.615319 systemd[1]: Started hv_kvp_daemon.service - Hyper-V KVP daemon. Jun 12 23:01:45.618705 chronyd[2413]: Timezone right/UTC failed leap second check, ignoring Jun 12 23:01:45.619683 chronyd[2413]: Loaded seccomp filter (level 2) Jun 12 23:01:45.621193 systemd[1]: hv_vss_daemon.service - Hyper-V VSS daemon skipped, unmet condition check ConditionPathExists=/dev/vmbus/hv_vss Jun 12 23:01:45.622905 systemd[1]: Starting motdgen.service - Generate /run/flatcar/motd... Jun 12 23:01:45.627722 KVP[2419]: KVP starting; pid is:2419 Jun 12 23:01:45.629748 KVP[2419]: KVP LIC Version: 3.1 Jun 12 23:01:45.632821 kernel: hv_utils: KVP IC version 4.0 Jun 12 23:01:45.633211 systemd[1]: Starting nvidia.service - NVIDIA Configure Service... Jun 12 23:01:45.640611 jq[2417]: false Jun 12 23:01:45.641484 systemd[1]: Starting ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline... Jun 12 23:01:45.649939 systemd[1]: Starting sshd-keygen.service - Generate sshd host keys... Jun 12 23:01:45.655005 extend-filesystems[2418]: Found /dev/sda6 Jun 12 23:01:45.661958 systemd[1]: Starting systemd-logind.service - User Login Management... Jun 12 23:01:45.669129 motdgen[2435]: /oem/oem-release: line 2: Azure: command not found Jun 12 23:01:45.669262 systemd[1]: tcsd.service - TCG Core Services Daemon skipped, unmet condition check ConditionPathExists=/dev/tpm0 Jun 12 23:01:45.670408 systemd[1]: Starting update-engine.service - Update Engine... Jun 12 23:01:45.677020 systemd[1]: Starting update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition... Jun 12 23:01:45.682568 extend-filesystems[2418]: Found /dev/sda9 Jun 12 23:01:45.693861 extend-filesystems[2418]: Checking size of /dev/sda9 Jun 12 23:01:45.689612 systemd[1]: Started chronyd.service - NTP client/server. Jun 12 23:01:45.699067 jq[2442]: true Jun 12 23:01:45.699051 systemd[1]: Finished dracut-shutdown.service - Restore /run/initramfs on shutdown. Jun 12 23:01:45.706185 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jun 12 23:01:45.707814 systemd[1]: Condition check resulted in enable-oem-cloudinit.service - Enable cloudinit being skipped. Jun 12 23:01:45.708007 systemd[1]: motdgen.service: Deactivated successfully. Jun 12 23:01:45.712831 systemd[1]: Finished motdgen.service - Generate /run/flatcar/motd. Jun 12 23:01:45.717615 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jun 12 23:01:45.718081 systemd[1]: Finished ssh-key-proc-cmdline.service - Install an ssh key from /proc/cmdline. Jun 12 23:01:45.740434 update_engine[2440]: I20260612 23:01:45.738186 2440 main.cc:92] Flatcar Update Engine starting Jun 12 23:01:45.744928 systemd[1]: Finished nvidia.service - NVIDIA Configure Service. Jun 12 23:01:45.751484 extend-filesystems[2418]: Resized partition /dev/sda9 Jun 12 23:01:45.759207 jq[2454]: true Jun 12 23:01:45.771949 extend-filesystems[2473]: resize2fs 1.47.4 (6-Mar-2025) Jun 12 23:01:45.786387 systemd-logind[2431]: New seat seat0. Jun 12 23:01:45.789532 kernel: EXT4-fs (sda9): resizing filesystem from 6359552 to 6376955 blocks Jun 12 23:01:45.789549 kernel: EXT4-fs (sda9): resized filesystem to 6376955 Jun 12 23:01:45.791509 systemd-logind[2431]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jun 12 23:01:45.792962 systemd[1]: Started systemd-logind.service - User Login Management. Jun 12 23:01:45.825854 extend-filesystems[2473]: Filesystem at /dev/sda9 is mounted on /; on-line resizing required Jun 12 23:01:45.825854 extend-filesystems[2473]: old_desc_blocks = 4, new_desc_blocks = 4 Jun 12 23:01:45.825854 extend-filesystems[2473]: The filesystem on /dev/sda9 is now 6376955 (4k) blocks long. Jun 12 23:01:45.866173 extend-filesystems[2418]: Resized filesystem in /dev/sda9 Jun 12 23:01:45.827422 systemd[1]: extend-filesystems.service: Deactivated successfully. Jun 12 23:01:45.828589 systemd[1]: Finished extend-filesystems.service - Extend Filesystems. Jun 12 23:01:45.886518 bash[2491]: Updated "/home/core/.ssh/authorized_keys" Jun 12 23:01:45.888831 systemd[1]: Finished update-ssh-keys-after-ignition.service - Run update-ssh-keys once after Ignition. Jun 12 23:01:45.900447 systemd[1]: sshkeys.service skipped, no trigger condition checks were met. Jun 12 23:01:45.903701 dbus-daemon[2415]: [system] SELinux support is enabled Jun 12 23:01:45.906227 systemd[1]: Started dbus.service - D-Bus System Message Bus. Jun 12 23:01:45.918003 update_engine[2440]: I20260612 23:01:45.917922 2440 update_check_scheduler.cc:74] Next update check in 5m43s Jun 12 23:01:45.919046 dbus-daemon[2415]: [system] Successfully activated service 'org.freedesktop.systemd1' Jun 12 23:01:45.919577 systemd[1]: Started update-engine.service - Update Engine. Jun 12 23:01:45.958914 systemd[1]: system-cloudinit@usr-share-coreos-cloud\x2dconfig.yml.service - Load cloud-config from /usr/share/coreos/cloud-config.yml skipped, unmet condition check ConditionFileNotEmpty=/usr/share/coreos/cloud-config.yml Jun 12 23:01:45.959501 systemd[1]: Reached target system-config.target - Load system-provided cloud configs. Jun 12 23:01:45.965033 systemd[1]: user-cloudinit-proc-cmdline.service - Load cloud-config from url defined in /proc/cmdline skipped, unmet condition check ConditionKernelCommandLine=cloud-config-url Jun 12 23:01:45.965318 systemd[1]: Reached target user-config.target - Load user-provided cloud configs. Jun 12 23:01:45.974825 systemd[1]: Started locksmithd.service - Cluster reboot manager. Jun 12 23:01:46.113640 sshd_keygen[2438]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jun 12 23:01:46.116862 locksmithd[2564]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jun 12 23:01:46.131921 systemd[1]: Finished sshd-keygen.service - Generate sshd host keys. Jun 12 23:01:46.138919 systemd[1]: Starting issuegen.service - Generate /run/issue... Jun 12 23:01:46.149917 systemd[1]: Starting waagent.service - Microsoft Azure Linux Agent... Jun 12 23:01:46.161055 systemd[1]: issuegen.service: Deactivated successfully. Jun 12 23:01:46.161497 systemd[1]: Finished issuegen.service - Generate /run/issue. Jun 12 23:01:46.174014 systemd[1]: Starting systemd-user-sessions.service - Permit User Sessions... Jun 12 23:01:46.182252 systemd[1]: Started waagent.service - Microsoft Azure Linux Agent. Jun 12 23:01:46.190071 systemd[1]: Finished systemd-user-sessions.service - Permit User Sessions. Jun 12 23:01:46.198162 systemd[1]: Started getty@tty1.service - Getty on tty1. Jun 12 23:01:46.203713 systemd[1]: Started serial-getty@ttyAMA0.service - Serial Getty on ttyAMA0. Jun 12 23:01:46.209008 systemd[1]: Reached target getty.target - Login Prompts. Jun 12 23:01:48.015696 containerd[2455]: time="2026-06-12T23:01:48Z" level=warning msg="Ignoring unknown key in TOML" column=1 error="strict mode: fields in the document are missing in the target struct" file=/usr/share/containerd/config.toml key=subreaper row=8 Jun 12 23:01:48.017006 containerd[2455]: time="2026-06-12T23:01:48.016924760Z" level=info msg="starting containerd" revision=301b2dac98f15c27117da5c8af12118a041a31d9 version=v2.2.2 Jun 12 23:01:48.027130 containerd[2455]: time="2026-06-12T23:01:48.027088896Z" level=warning msg="Configuration migrated from version 2, use `containerd config migrate` to avoid migration" t="8.24µs" Jun 12 23:01:48.027130 containerd[2455]: time="2026-06-12T23:01:48.027123992Z" level=info msg="loading plugin" id=io.containerd.content.v1.content type=io.containerd.content.v1 Jun 12 23:01:48.027195 containerd[2455]: time="2026-06-12T23:01:48.027161912Z" level=info msg="loading plugin" id=io.containerd.image-verifier.v1.bindir type=io.containerd.image-verifier.v1 Jun 12 23:01:48.027195 containerd[2455]: time="2026-06-12T23:01:48.027172072Z" level=info msg="loading plugin" id=io.containerd.internal.v1.opt type=io.containerd.internal.v1 Jun 12 23:01:48.027364 containerd[2455]: time="2026-06-12T23:01:48.027339632Z" level=info msg="loading plugin" id=io.containerd.warning.v1.deprecations type=io.containerd.warning.v1 Jun 12 23:01:48.027395 containerd[2455]: time="2026-06-12T23:01:48.027364144Z" level=info msg="loading plugin" id=io.containerd.mount-handler.v1.erofs type=io.containerd.mount-handler.v1 Jun 12 23:01:48.027395 containerd[2455]: time="2026-06-12T23:01:48.027375360Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Jun 12 23:01:48.027440 containerd[2455]: time="2026-06-12T23:01:48.027426048Z" level=info msg="skip loading plugin" error="no scratch file generator: skip plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 Jun 12 23:01:48.027457 containerd[2455]: time="2026-06-12T23:01:48.027438888Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Jun 12 23:01:48.027622 containerd[2455]: time="2026-06-12T23:01:48.027605896Z" level=info msg="skip loading plugin" error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 Jun 12 23:01:48.027635 containerd[2455]: time="2026-06-12T23:01:48.027620584Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Jun 12 23:01:48.027650 containerd[2455]: time="2026-06-12T23:01:48.027631424Z" level=info msg="skip loading plugin" error="devmapper not configured: skip plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 Jun 12 23:01:48.027650 containerd[2455]: time="2026-06-12T23:01:48.027639736Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 Jun 12 23:01:48.027827 containerd[2455]: time="2026-06-12T23:01:48.027809072Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.native type=io.containerd.snapshotter.v1 Jun 12 23:01:48.027873 containerd[2455]: time="2026-06-12T23:01:48.027865968Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.overlayfs type=io.containerd.snapshotter.v1 Jun 12 23:01:48.028009 containerd[2455]: time="2026-06-12T23:01:48.027992680Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Jun 12 23:01:48.028035 containerd[2455]: time="2026-06-12T23:01:48.028023536Z" level=info msg="skip loading plugin" error="lstat /var/lib/containerd/io.containerd.snapshotter.v1.zfs: no such file or directory: skip plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 Jun 12 23:01:48.028051 containerd[2455]: time="2026-06-12T23:01:48.028033520Z" level=info msg="loading plugin" id=io.containerd.event.v1.exchange type=io.containerd.event.v1 Jun 12 23:01:48.028770 containerd[2455]: time="2026-06-12T23:01:48.028746248Z" level=info msg="loading plugin" id=io.containerd.monitor.task.v1.cgroups type=io.containerd.monitor.task.v1 Jun 12 23:01:48.029142 containerd[2455]: time="2026-06-12T23:01:48.029121112Z" level=info msg="loading plugin" id=io.containerd.metadata.v1.bolt type=io.containerd.metadata.v1 Jun 12 23:01:48.029217 containerd[2455]: time="2026-06-12T23:01:48.029205232Z" level=info msg="metadata content store policy set" policy=shared Jun 12 23:01:48.042320 containerd[2455]: time="2026-06-12T23:01:48.042283936Z" level=info msg="loading plugin" id=io.containerd.gc.v1.scheduler type=io.containerd.gc.v1 Jun 12 23:01:48.042377 containerd[2455]: time="2026-06-12T23:01:48.042329992Z" level=info msg="loading plugin" id=io.containerd.nri.v1.nri type=io.containerd.nri.v1 Jun 12 23:01:48.042686 containerd[2455]: time="2026-06-12T23:01:48.042661152Z" level=info msg="built-in NRI default validator is disabled" Jun 12 23:01:48.042686 containerd[2455]: time="2026-06-12T23:01:48.042682792Z" level=info msg="runtime interface created" Jun 12 23:01:48.042712 containerd[2455]: time="2026-06-12T23:01:48.042687808Z" level=info msg="created NRI interface" Jun 12 23:01:48.042712 containerd[2455]: time="2026-06-12T23:01:48.042696712Z" level=info msg="loading plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 Jun 12 23:01:48.059306 containerd[2455]: time="2026-06-12T23:01:48.059266240Z" level=info msg="loading plugin" id=io.containerd.differ.v1.walking type=io.containerd.differ.v1 Jun 12 23:01:48.059306 containerd[2455]: time="2026-06-12T23:01:48.059302728Z" level=info msg="loading plugin" id=io.containerd.lease.v1.manager type=io.containerd.lease.v1 Jun 12 23:01:48.059306 containerd[2455]: time="2026-06-12T23:01:48.059313288Z" level=info msg="loading plugin" id=io.containerd.mount-manager.v1.bolt type=io.containerd.mount-manager.v1 Jun 12 23:01:48.059455 containerd[2455]: time="2026-06-12T23:01:48.059435224Z" level=info msg="loading plugin" id=io.containerd.service.v1.containers-service type=io.containerd.service.v1 Jun 12 23:01:48.059477 containerd[2455]: time="2026-06-12T23:01:48.059455168Z" level=info msg="loading plugin" id=io.containerd.service.v1.content-service type=io.containerd.service.v1 Jun 12 23:01:48.059477 containerd[2455]: time="2026-06-12T23:01:48.059462408Z" level=info msg="loading plugin" id=io.containerd.service.v1.diff-service type=io.containerd.service.v1 Jun 12 23:01:48.059477 containerd[2455]: time="2026-06-12T23:01:48.059470352Z" level=info msg="loading plugin" id=io.containerd.service.v1.images-service type=io.containerd.service.v1 Jun 12 23:01:48.059509 containerd[2455]: time="2026-06-12T23:01:48.059478640Z" level=info msg="loading plugin" id=io.containerd.service.v1.introspection-service type=io.containerd.service.v1 Jun 12 23:01:48.059509 containerd[2455]: time="2026-06-12T23:01:48.059487384Z" level=info msg="loading plugin" id=io.containerd.service.v1.namespaces-service type=io.containerd.service.v1 Jun 12 23:01:48.059509 containerd[2455]: time="2026-06-12T23:01:48.059493512Z" level=info msg="loading plugin" id=io.containerd.service.v1.snapshots-service type=io.containerd.service.v1 Jun 12 23:01:48.059509 containerd[2455]: time="2026-06-12T23:01:48.059498968Z" level=info msg="loading plugin" id=io.containerd.shim.v1.manager type=io.containerd.shim.v1 Jun 12 23:01:48.059509 containerd[2455]: time="2026-06-12T23:01:48.059506360Z" level=info msg="loading plugin" id=io.containerd.runtime.v2.task type=io.containerd.runtime.v2 Jun 12 23:01:48.059608 containerd[2455]: time="2026-06-12T23:01:48.059592576Z" level=info msg="loading plugin" id=io.containerd.service.v1.tasks-service type=io.containerd.service.v1 Jun 12 23:01:48.059622 containerd[2455]: time="2026-06-12T23:01:48.059613104Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.containers type=io.containerd.grpc.v1 Jun 12 23:01:48.059637 containerd[2455]: time="2026-06-12T23:01:48.059621768Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.content type=io.containerd.grpc.v1 Jun 12 23:01:48.059637 containerd[2455]: time="2026-06-12T23:01:48.059629296Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.diff type=io.containerd.grpc.v1 Jun 12 23:01:48.059663 containerd[2455]: time="2026-06-12T23:01:48.059638928Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.events type=io.containerd.grpc.v1 Jun 12 23:01:48.059663 containerd[2455]: time="2026-06-12T23:01:48.059647224Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.images type=io.containerd.grpc.v1 Jun 12 23:01:48.059663 containerd[2455]: time="2026-06-12T23:01:48.059657248Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.introspection type=io.containerd.grpc.v1 Jun 12 23:01:48.059695 containerd[2455]: time="2026-06-12T23:01:48.059663512Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.leases type=io.containerd.grpc.v1 Jun 12 23:01:48.059695 containerd[2455]: time="2026-06-12T23:01:48.059671240Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.mounts type=io.containerd.grpc.v1 Jun 12 23:01:48.059695 containerd[2455]: time="2026-06-12T23:01:48.059676688Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.namespaces type=io.containerd.grpc.v1 Jun 12 23:01:48.059695 containerd[2455]: time="2026-06-12T23:01:48.059684600Z" level=info msg="loading plugin" id=io.containerd.sandbox.store.v1.local type=io.containerd.sandbox.store.v1 Jun 12 23:01:48.059695 containerd[2455]: time="2026-06-12T23:01:48.059690512Z" level=info msg="loading plugin" id=io.containerd.transfer.v1.local type=io.containerd.transfer.v1 Jun 12 23:01:48.059749 containerd[2455]: time="2026-06-12T23:01:48.059710200Z" level=info msg="loading plugin" id=io.containerd.cri.v1.images type=io.containerd.cri.v1 Jun 12 23:01:48.060270 containerd[2455]: time="2026-06-12T23:01:48.060248432Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\" for snapshotter \"overlayfs\"" Jun 12 23:01:48.060300 containerd[2455]: time="2026-06-12T23:01:48.060278896Z" level=info msg="Start snapshots syncer" Jun 12 23:01:48.060300 containerd[2455]: time="2026-06-12T23:01:48.060294984Z" level=info msg="loading plugin" id=io.containerd.cri.v1.runtime type=io.containerd.cri.v1 Jun 12 23:01:48.060554 containerd[2455]: time="2026-06-12T23:01:48.060502488Z" level=info msg="starting cri plugin" config="{\"containerd\":{\"defaultRuntimeName\":\"runc\",\"runtimes\":{\"runc\":{\"runtimeType\":\"io.containerd.runc.v2\",\"runtimePath\":\"\",\"PodAnnotations\":null,\"ContainerAnnotations\":null,\"options\":{\"BinaryName\":\"\",\"CriuImagePath\":\"\",\"CriuWorkPath\":\"\",\"IoGid\":0,\"IoUid\":0,\"NoNewKeyring\":false,\"Root\":\"\",\"ShimCgroup\":\"\",\"SystemdCgroup\":true},\"privileged_without_host_devices\":false,\"privileged_without_host_devices_all_devices_allowed\":false,\"cgroupWritable\":false,\"baseRuntimeSpec\":\"\",\"cniConfDir\":\"\",\"cniMaxConfNum\":0,\"snapshotter\":\"\",\"sandboxer\":\"podsandbox\",\"io_type\":\"\"}},\"ignoreBlockIONotEnabledErrors\":false,\"ignoreRdtNotEnabledErrors\":false},\"cni\":{\"binDir\":\"\",\"binDirs\":[\"/opt/cni/bin\"],\"confDir\":\"/etc/cni/net.d\",\"maxConfNum\":1,\"setupSerially\":false,\"confTemplate\":\"\",\"ipPref\":\"\",\"useInternalLoopback\":false},\"enableSelinux\":true,\"selinuxCategoryRange\":1024,\"maxContainerLogLineSize\":16384,\"disableApparmor\":false,\"restrictOOMScoreAdj\":false,\"disableProcMount\":false,\"unsetSeccompProfile\":\"\",\"tolerateMissingHugetlbController\":true,\"disableHugetlbController\":true,\"device_ownership_from_security_context\":false,\"ignoreImageDefinedVolumes\":false,\"netnsMountsUnderStateDir\":false,\"enableUnprivilegedPorts\":true,\"enableUnprivilegedICMP\":true,\"enableCDI\":true,\"cdiSpecDirs\":[\"/etc/cdi\",\"/var/run/cdi\"],\"drainExecSyncIOTimeout\":\"0s\",\"ignoreDeprecationWarnings\":null,\"containerdRootDir\":\"/var/lib/containerd\",\"containerdEndpoint\":\"/run/containerd/containerd.sock\",\"rootDir\":\"/var/lib/containerd/io.containerd.grpc.v1.cri\",\"stateDir\":\"/run/containerd/io.containerd.grpc.v1.cri\"}" Jun 12 23:01:48.060554 containerd[2455]: time="2026-06-12T23:01:48.060542152Z" level=info msg="loading plugin" id=io.containerd.podsandbox.controller.v1.podsandbox type=io.containerd.podsandbox.controller.v1 Jun 12 23:01:48.060656 containerd[2455]: time="2026-06-12T23:01:48.060601896Z" level=info msg="loading plugin" id=io.containerd.sandbox.controller.v1.shim type=io.containerd.sandbox.controller.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060682816Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandbox-controllers type=io.containerd.grpc.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060706384Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandboxes type=io.containerd.grpc.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060714888Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.snapshots type=io.containerd.grpc.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060722416Z" level=info msg="loading plugin" id=io.containerd.streaming.v1.manager type=io.containerd.streaming.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060731616Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.streaming type=io.containerd.grpc.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060738056Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.tasks type=io.containerd.grpc.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060744536Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.transfer type=io.containerd.grpc.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060754312Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.version type=io.containerd.grpc.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060760032Z" level=info msg="loading plugin" id=io.containerd.monitor.container.v1.restart type=io.containerd.monitor.container.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060790592Z" level=info msg="loading plugin" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060803112Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060808552Z" level=info msg="loading plugin" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060814792Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 Jun 12 23:01:48.060851 containerd[2455]: time="2026-06-12T23:01:48.060820968Z" level=info msg="loading plugin" id=io.containerd.ttrpc.v1.otelttrpc type=io.containerd.ttrpc.v1 Jun 12 23:01:48.061039 containerd[2455]: time="2026-06-12T23:01:48.060827432Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.healthcheck type=io.containerd.grpc.v1 Jun 12 23:01:48.061039 containerd[2455]: time="2026-06-12T23:01:48.060834288Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.cri type=io.containerd.grpc.v1 Jun 12 23:01:48.061039 containerd[2455]: time="2026-06-12T23:01:48.060841768Z" level=info msg="Connect containerd service" Jun 12 23:01:48.061039 containerd[2455]: time="2026-06-12T23:01:48.060863104Z" level=info msg="using experimental NRI integration - disable nri plugin to prevent this" Jun 12 23:01:48.061562 containerd[2455]: time="2026-06-12T23:01:48.061527048Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jun 12 23:01:49.189199 containerd[2455]: time="2026-06-12T23:01:49.188834096Z" level=info msg="Start subscribing containerd event" Jun 12 23:01:49.189199 containerd[2455]: time="2026-06-12T23:01:49.189057264Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jun 12 23:01:49.189199 containerd[2455]: time="2026-06-12T23:01:49.189096784Z" level=info msg=serving... address=/run/containerd/containerd.sock Jun 12 23:01:49.190361 containerd[2455]: time="2026-06-12T23:01:49.189642656Z" level=info msg="Start recovering state" Jun 12 23:01:49.190361 containerd[2455]: time="2026-06-12T23:01:49.189745032Z" level=info msg="Start event monitor" Jun 12 23:01:49.190361 containerd[2455]: time="2026-06-12T23:01:49.189758880Z" level=info msg="Start cni network conf syncer for default" Jun 12 23:01:49.190361 containerd[2455]: time="2026-06-12T23:01:49.189764816Z" level=info msg="Start streaming server" Jun 12 23:01:49.190361 containerd[2455]: time="2026-06-12T23:01:49.189808544Z" level=info msg="Registered namespace \"k8s.io\" with NRI" Jun 12 23:01:49.190361 containerd[2455]: time="2026-06-12T23:01:49.189814488Z" level=info msg="runtime interface starting up..." Jun 12 23:01:49.190361 containerd[2455]: time="2026-06-12T23:01:49.189819456Z" level=info msg="starting plugins..." Jun 12 23:01:49.190361 containerd[2455]: time="2026-06-12T23:01:49.189831816Z" level=info msg="Synchronizing NRI (plugin) with current runtime state" Jun 12 23:01:49.195796 containerd[2455]: time="2026-06-12T23:01:49.191575912Z" level=info msg="containerd successfully booted in 1.176123s" Jun 12 23:01:49.192012 systemd[1]: Started containerd.service - containerd container runtime. Jun 12 23:01:49.197342 systemd[1]: Reached target multi-user.target - Multi-User System. Jun 12 23:01:49.205829 systemd[1]: Startup finished in 2.708s (kernel) + 14.507s (initrd) + 18.323s (userspace) = 35.539s. Jun 12 23:01:49.504744 waagent[2590]: 2026-06-12T23:01:49.500340Z INFO Daemon Daemon Azure Linux Agent Version: 2.12.0.4 Jun 12 23:01:49.505070 waagent[2590]: 2026-06-12T23:01:49.504844Z INFO Daemon Daemon OS: flatcar 4722.0.0 Jun 12 23:01:49.508211 waagent[2590]: 2026-06-12T23:01:49.508180Z INFO Daemon Daemon Python: 3.12.13 Jun 12 23:01:49.511796 waagent[2590]: 2026-06-12T23:01:49.511439Z INFO Daemon Daemon Run daemon Jun 12 23:01:49.514717 waagent[2590]: 2026-06-12T23:01:49.514677Z INFO Daemon Daemon No RDMA handler exists for distro='Flatcar Container Linux by Kinvolk' version='4722.0.0' Jun 12 23:01:49.521726 waagent[2590]: 2026-06-12T23:01:49.521693Z INFO Daemon Daemon Using waagent for provisioning Jun 12 23:01:49.525667 waagent[2590]: 2026-06-12T23:01:49.525637Z INFO Daemon Daemon Activate resource disk Jun 12 23:01:49.529019 waagent[2590]: 2026-06-12T23:01:49.528993Z INFO Daemon Daemon Searching gen1 prefix 00000000-0001 or gen2 f8b3781a-1e82-4818-a1c3-63d806ec15bb Jun 12 23:01:49.537946 waagent[2590]: 2026-06-12T23:01:49.537910Z INFO Daemon Daemon Found device: None Jun 12 23:01:49.542634 waagent[2590]: 2026-06-12T23:01:49.542595Z ERROR Daemon Daemon Failed to mount resource disk [ResourceDiskError] unable to detect disk topology Jun 12 23:01:49.549158 waagent[2590]: 2026-06-12T23:01:49.549127Z ERROR Daemon Daemon Event: name=WALinuxAgent, op=ActivateResourceDisk, message=[ResourceDiskError] unable to detect disk topology, duration=0 Jun 12 23:01:49.557792 waagent[2590]: 2026-06-12T23:01:49.557752Z INFO Daemon Daemon Clean protocol and wireserver endpoint Jun 12 23:01:49.562122 waagent[2590]: 2026-06-12T23:01:49.562088Z INFO Daemon Daemon Running default provisioning handler Jun 12 23:01:49.573187 waagent[2590]: 2026-06-12T23:01:49.573142Z INFO Daemon Daemon Unable to get cloud-init enabled status from systemctl: Command '['systemctl', 'is-enabled', 'cloud-init-local.service']' returned non-zero exit status 4. Jun 12 23:01:49.583568 waagent[2590]: 2026-06-12T23:01:49.583530Z INFO Daemon Daemon Unable to get cloud-init enabled status from service: [Errno 2] No such file or directory: 'service' Jun 12 23:01:49.590883 waagent[2590]: 2026-06-12T23:01:49.590840Z INFO Daemon Daemon cloud-init is enabled: False Jun 12 23:01:49.594990 waagent[2590]: 2026-06-12T23:01:49.594961Z INFO Daemon Daemon Copying ovf-env.xml Jun 12 23:01:49.646795 waagent[2590]: 2026-06-12T23:01:49.645164Z INFO Daemon Daemon Successfully mounted dvd Jun 12 23:01:49.747599 systemd[1]: mnt-cdrom-secure.mount: Deactivated successfully. Jun 12 23:01:49.749334 waagent[2590]: 2026-06-12T23:01:49.749276Z INFO Daemon Daemon Detect protocol endpoint Jun 12 23:01:49.753447 waagent[2590]: 2026-06-12T23:01:49.753412Z INFO Daemon Daemon Clean protocol and wireserver endpoint Jun 12 23:01:49.758227 waagent[2590]: 2026-06-12T23:01:49.758156Z INFO Daemon Daemon WireServer endpoint is not found. Rerun dhcp handler Jun 12 23:01:49.762980 waagent[2590]: 2026-06-12T23:01:49.762952Z INFO Daemon Daemon Test for route to 168.63.129.16 Jun 12 23:01:49.767244 waagent[2590]: 2026-06-12T23:01:49.767213Z INFO Daemon Daemon Route to 168.63.129.16 exists Jun 12 23:01:49.771546 waagent[2590]: 2026-06-12T23:01:49.771518Z INFO Daemon Daemon Wire server endpoint:168.63.129.16 Jun 12 23:01:49.801526 waagent[2590]: 2026-06-12T23:01:49.801488Z INFO Daemon Daemon Fabric preferred wire protocol version:2015-04-05 Jun 12 23:01:49.806665 waagent[2590]: 2026-06-12T23:01:49.806643Z INFO Daemon Daemon Wire protocol version:2012-11-30 Jun 12 23:01:49.811146 waagent[2590]: 2026-06-12T23:01:49.811122Z INFO Daemon Daemon Server preferred version:2015-04-05 Jun 12 23:01:49.965717 waagent[2590]: 2026-06-12T23:01:49.965632Z INFO Daemon Daemon Initializing goal state during protocol detection Jun 12 23:01:49.970833 waagent[2590]: 2026-06-12T23:01:49.970798Z INFO Daemon Daemon Forcing an update of the goal state. Jun 12 23:01:49.981081 waagent[2590]: 2026-06-12T23:01:49.981045Z INFO Daemon Fetched a new incarnation for the WireServer goal state [incarnation 1] Jun 12 23:01:49.997819 waagent[2590]: 2026-06-12T23:01:49.997750Z INFO Daemon Daemon HostGAPlugin version: 1.0.8.184 Jun 12 23:01:50.002198 waagent[2590]: 2026-06-12T23:01:50.002166Z INFO Daemon Jun 12 23:01:50.004709 waagent[2590]: 2026-06-12T23:01:50.004678Z INFO Daemon Fetched new vmSettings [HostGAPlugin correlation ID: 8b7afe7f-5344-41fa-b7cc-f61105f2f0f4 eTag: 18224624185040648648 source: Fabric] Jun 12 23:01:50.013335 waagent[2590]: 2026-06-12T23:01:50.013278Z INFO Daemon The vmSettings originated via Fabric; will ignore them. Jun 12 23:01:50.018222 waagent[2590]: 2026-06-12T23:01:50.018192Z INFO Daemon Jun 12 23:01:50.020598 waagent[2590]: 2026-06-12T23:01:50.020569Z INFO Daemon Fetching full goal state from the WireServer [incarnation 1] Jun 12 23:01:50.028587 waagent[2590]: 2026-06-12T23:01:50.028556Z INFO Daemon Daemon Downloading artifacts profile blob Jun 12 23:01:50.087705 waagent[2590]: 2026-06-12T23:01:50.087646Z INFO Daemon Downloaded certificate {'thumbprint': 'B12C3B7C90B59C83579773263B148124682A61DF', 'hasPrivateKey': True} Jun 12 23:01:50.095353 waagent[2590]: 2026-06-12T23:01:50.095314Z INFO Daemon Fetch goal state completed Jun 12 23:01:50.105026 waagent[2590]: 2026-06-12T23:01:50.104995Z INFO Daemon Daemon Starting provisioning Jun 12 23:01:50.108918 waagent[2590]: 2026-06-12T23:01:50.108882Z INFO Daemon Daemon Handle ovf-env.xml. Jun 12 23:01:50.112474 waagent[2590]: 2026-06-12T23:01:50.112444Z INFO Daemon Daemon Set hostname [ci-4722.0.0-a-a1eba1ae39] Jun 12 23:01:50.133612 waagent[2590]: 2026-06-12T23:01:50.133536Z INFO Daemon Daemon Publish hostname [ci-4722.0.0-a-a1eba1ae39] Jun 12 23:01:50.138904 waagent[2590]: 2026-06-12T23:01:50.138641Z INFO Daemon Daemon Examine /proc/net/route for primary interface Jun 12 23:01:50.143739 waagent[2590]: 2026-06-12T23:01:50.143701Z INFO Daemon Daemon Primary interface is [eth0] Jun 12 23:01:50.153058 systemd-networkd[2176]: eth0: Found matching .network file, based on potentially unpredictable interface name: /usr/lib/systemd/network/zz-default.network Jun 12 23:01:50.153064 systemd-networkd[2176]: eth0: Reconfiguring with /usr/lib/systemd/network/zz-default.network. Jun 12 23:01:50.153116 systemd-networkd[2176]: eth0: DHCP lease lost Jun 12 23:01:50.158474 login[2592]: pam_unix(login:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:01:50.158474 login[2593]: pam_unix(login:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:01:50.162815 waagent[2590]: 2026-06-12T23:01:50.162012Z INFO Daemon Daemon Create user account if not exists Jun 12 23:01:50.167815 waagent[2590]: 2026-06-12T23:01:50.167035Z INFO Daemon Daemon User core already exists, skip useradd Jun 12 23:01:50.171673 waagent[2590]: 2026-06-12T23:01:50.171248Z INFO Daemon Daemon Configure sudoer Jun 12 23:01:50.175141 waagent[2590]: 2026-06-12T23:01:50.175095Z INFO Daemon Daemon Configure sshd Jun 12 23:01:50.175307 systemd[1]: Created slice user-500.slice - User Slice of UID 500. Jun 12 23:01:50.175832 systemd-networkd[2176]: eth0: DHCPv4 address 10.0.0.35/24, gateway 10.0.0.1 acquired from 168.63.129.16 Jun 12 23:01:50.177005 systemd[1]: Starting user-runtime-dir@500.service - User Runtime Directory /run/user/500... Jun 12 23:01:50.191070 waagent[2590]: 2026-06-12T23:01:50.181018Z INFO Daemon Daemon Added a configuration snippet disabling SSH password-based authentication methods. It also configures SSH client probing to keep connections alive. Jun 12 23:01:50.191070 waagent[2590]: 2026-06-12T23:01:50.190883Z INFO Daemon Daemon Deploy ssh public key. Jun 12 23:01:50.194368 systemd-logind[2431]: New session '2' of user 'core' with class 'user-light' and type 'tty'. Jun 12 23:01:50.197922 systemd-logind[2431]: New session '1' of user 'core' with class 'user-light' and type 'tty'. Jun 12 23:01:50.220704 systemd[1]: Finished user-runtime-dir@500.service - User Runtime Directory /run/user/500. Jun 12 23:01:50.229961 systemd[1]: Started session-1.scope - Session 1 of User core. Jun 12 23:01:50.231112 systemd[1]: Started session-2.scope - Session 2 of User core. Jun 12 23:01:51.336803 waagent[2590]: 2026-06-12T23:01:51.334979Z INFO Daemon Daemon Provisioning complete Jun 12 23:01:51.345638 waagent[2590]: 2026-06-12T23:01:51.345600Z INFO Daemon Daemon RDMA capabilities are not enabled, skipping Jun 12 23:01:51.350065 waagent[2590]: 2026-06-12T23:01:51.350031Z INFO Daemon Daemon End of log to /dev/console. The agent will now check for updates and then will process extensions. Jun 12 23:01:51.357850 waagent[2590]: 2026-06-12T23:01:51.357821Z INFO Daemon Daemon Installed Agent WALinuxAgent-2.12.0.4 is the most current agent Jun 12 23:01:51.460823 waagent[2678]: 2026-06-12T23:01:51.460730Z INFO ExtHandler ExtHandler Azure Linux Agent (Goal State Agent version 2.12.0.4) Jun 12 23:01:51.461635 waagent[2678]: 2026-06-12T23:01:51.461263Z INFO ExtHandler ExtHandler OS: flatcar 4722.0.0 Jun 12 23:01:51.461635 waagent[2678]: 2026-06-12T23:01:51.461354Z INFO ExtHandler ExtHandler Python: 3.12.13 Jun 12 23:01:51.461635 waagent[2678]: 2026-06-12T23:01:51.461395Z INFO ExtHandler ExtHandler CPU Arch: aarch64 Jun 12 23:01:51.494899 waagent[2678]: 2026-06-12T23:01:51.494857Z INFO ExtHandler ExtHandler Distro: flatcar-4722.0.0; OSUtil: FlatcarUtil; AgentService: waagent; Python: 3.12.13; Arch: aarch64; systemd: True; LISDrivers: Absent; logrotate: logrotate 3.22.0; Jun 12 23:01:51.495135 waagent[2678]: 2026-06-12T23:01:51.495107Z INFO ExtHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Jun 12 23:01:51.495287 waagent[2678]: 2026-06-12T23:01:51.495262Z INFO ExtHandler ExtHandler Wire server endpoint:168.63.129.16 Jun 12 23:01:51.501272 waagent[2678]: 2026-06-12T23:01:51.501227Z INFO ExtHandler Fetched a new incarnation for the WireServer goal state [incarnation 1] Jun 12 23:01:51.505955 waagent[2678]: 2026-06-12T23:01:51.505924Z INFO ExtHandler ExtHandler HostGAPlugin version: 1.0.8.184 Jun 12 23:01:51.506387 waagent[2678]: 2026-06-12T23:01:51.506354Z INFO ExtHandler Jun 12 23:01:51.506537 waagent[2678]: 2026-06-12T23:01:51.506510Z INFO ExtHandler Fetched new vmSettings [HostGAPlugin correlation ID: 17e1eb7b-d80e-4c0f-99f9-59a80e8d5638 eTag: 18224624185040648648 source: Fabric] Jun 12 23:01:51.506884 waagent[2678]: 2026-06-12T23:01:51.506846Z INFO ExtHandler The vmSettings originated via Fabric; will ignore them. Jun 12 23:01:51.507416 waagent[2678]: 2026-06-12T23:01:51.507383Z INFO ExtHandler Jun 12 23:01:51.507554 waagent[2678]: 2026-06-12T23:01:51.507529Z INFO ExtHandler Fetching full goal state from the WireServer [incarnation 1] Jun 12 23:01:51.511179 waagent[2678]: 2026-06-12T23:01:51.511151Z INFO ExtHandler ExtHandler Downloading artifacts profile blob Jun 12 23:01:51.574750 waagent[2678]: 2026-06-12T23:01:51.573762Z INFO ExtHandler Downloaded certificate {'thumbprint': 'B12C3B7C90B59C83579773263B148124682A61DF', 'hasPrivateKey': True} Jun 12 23:01:51.574750 waagent[2678]: 2026-06-12T23:01:51.574149Z INFO ExtHandler Fetch goal state completed Jun 12 23:01:51.583700 waagent[2678]: 2026-06-12T23:01:51.583664Z INFO ExtHandler ExtHandler OpenSSL version: OpenSSL 3.5.6 7 Apr 2026 (Library: OpenSSL 3.5.6 7 Apr 2026) Jun 12 23:01:51.586569 waagent[2678]: 2026-06-12T23:01:51.586533Z INFO ExtHandler ExtHandler WALinuxAgent-2.12.0.4 running as process 2678 Jun 12 23:01:51.586844 waagent[2678]: 2026-06-12T23:01:51.586756Z INFO ExtHandler ExtHandler ******** AutoUpdate.Enabled is set to False, not processing the operation ******** Jun 12 23:01:51.587201 waagent[2678]: 2026-06-12T23:01:51.587171Z INFO ExtHandler ExtHandler ******** AutoUpdate.UpdateToLatestVersion is set to False, not processing the operation ******** Jun 12 23:01:51.588400 waagent[2678]: 2026-06-12T23:01:51.588364Z INFO ExtHandler ExtHandler [CGI] Cgroup monitoring is not supported on ['flatcar', '4722.0.0', '', 'Flatcar Container Linux by Kinvolk'] Jun 12 23:01:51.588811 waagent[2678]: 2026-06-12T23:01:51.588757Z INFO ExtHandler ExtHandler [CGI] Agent will reset the quotas in case distro: ['flatcar', '4722.0.0', '', 'Flatcar Container Linux by Kinvolk'] went from supported to unsupported Jun 12 23:01:51.588993 waagent[2678]: 2026-06-12T23:01:51.588965Z INFO ExtHandler ExtHandler [CGI] Agent cgroups enabled: False Jun 12 23:01:51.589496 waagent[2678]: 2026-06-12T23:01:51.589464Z INFO ExtHandler ExtHandler Starting setup for Persistent firewall rules Jun 12 23:01:51.622459 waagent[2678]: 2026-06-12T23:01:51.622426Z INFO ExtHandler ExtHandler Firewalld service not running/unavailable, trying to set up waagent-network-setup.service Jun 12 23:01:51.622738 waagent[2678]: 2026-06-12T23:01:51.622705Z INFO ExtHandler ExtHandler Successfully updated the Binary file /var/lib/waagent/waagent-network-setup.py for firewall setup Jun 12 23:01:51.626594 waagent[2678]: 2026-06-12T23:01:51.626572Z INFO ExtHandler ExtHandler Service: waagent-network-setup.service not enabled. Adding it now Jun 12 23:01:51.630898 systemd[1]: Reload requested from client PID 2693 ('systemctl') (unit waagent.service)... Jun 12 23:01:51.630911 systemd[1]: Reloading... Jun 12 23:01:51.708821 zram_generator::config[2741]: No configuration found. Jun 12 23:01:51.908647 systemd[1]: Reloading finished in 277 ms. Jun 12 23:01:51.932989 waagent[2678]: 2026-06-12T23:01:51.931763Z INFO ExtHandler ExtHandler Successfully added and enabled the waagent-network-setup.service Jun 12 23:01:51.934832 waagent[2678]: 2026-06-12T23:01:51.933449Z INFO ExtHandler ExtHandler Persistent firewall rules setup successfully Jun 12 23:01:52.271863 waagent[2678]: 2026-06-12T23:01:52.271459Z INFO ExtHandler ExtHandler DROP rule is not available which implies no firewall rules are set yet. Environment thread will set it up. Jun 12 23:01:52.271863 waagent[2678]: 2026-06-12T23:01:52.271769Z INFO ExtHandler ExtHandler Checking if log collection is allowed at this time [False]. All three conditions must be met: 1. configuration enabled [True], 2. cgroups v1 enabled [False] OR cgroups v2 is in use and v2 resource limiting configuration enabled [False], 3. python supported: [True] Jun 12 23:01:52.272456 waagent[2678]: 2026-06-12T23:01:52.272417Z INFO ExtHandler ExtHandler Starting env monitor service. Jun 12 23:01:52.272816 waagent[2678]: 2026-06-12T23:01:52.272681Z INFO ExtHandler ExtHandler Start SendTelemetryHandler service. Jun 12 23:01:52.272980 waagent[2678]: 2026-06-12T23:01:52.272949Z INFO MonitorHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Jun 12 23:01:52.273116 waagent[2678]: 2026-06-12T23:01:52.273083Z INFO SendTelemetryHandler ExtHandler Successfully started the SendTelemetryHandler thread Jun 12 23:01:52.273150 waagent[2678]: 2026-06-12T23:01:52.273125Z INFO ExtHandler ExtHandler Start Extension Telemetry service. Jun 12 23:01:52.273360 waagent[2678]: 2026-06-12T23:01:52.273334Z INFO EnvHandler ExtHandler WireServer endpoint 168.63.129.16 read from file Jun 12 23:01:52.273488 waagent[2678]: 2026-06-12T23:01:52.273466Z INFO MonitorHandler ExtHandler Wire server endpoint:168.63.129.16 Jun 12 23:01:52.273642 waagent[2678]: 2026-06-12T23:01:52.273610Z INFO TelemetryEventsCollector ExtHandler Extension Telemetry pipeline enabled: True Jun 12 23:01:52.273687 waagent[2678]: 2026-06-12T23:01:52.273650Z INFO ExtHandler ExtHandler Goal State Period: 6 sec. This indicates how often the agent checks for new goal states and reports status. Jun 12 23:01:52.274660 waagent[2678]: 2026-06-12T23:01:52.274069Z INFO EnvHandler ExtHandler Wire server endpoint:168.63.129.16 Jun 12 23:01:52.274660 waagent[2678]: 2026-06-12T23:01:52.274192Z INFO EnvHandler ExtHandler Configure routes Jun 12 23:01:52.274660 waagent[2678]: 2026-06-12T23:01:52.274242Z INFO EnvHandler ExtHandler Gateway:None Jun 12 23:01:52.274660 waagent[2678]: 2026-06-12T23:01:52.274273Z INFO EnvHandler ExtHandler Routes:None Jun 12 23:01:52.275104 waagent[2678]: 2026-06-12T23:01:52.275066Z INFO MonitorHandler ExtHandler Monitor.NetworkConfigurationChanges is disabled. Jun 12 23:01:52.275331 waagent[2678]: 2026-06-12T23:01:52.275303Z INFO MonitorHandler ExtHandler Routing table from /proc/net/route: Jun 12 23:01:52.275331 waagent[2678]: Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT Jun 12 23:01:52.275331 waagent[2678]: eth0 00000000 0100000A 0003 0 0 1024 00000000 0 0 0 Jun 12 23:01:52.275331 waagent[2678]: eth0 0000000A 00000000 0001 0 0 1024 00FFFFFF 0 0 0 Jun 12 23:01:52.275331 waagent[2678]: eth0 0100000A 00000000 0005 0 0 1024 FFFFFFFF 0 0 0 Jun 12 23:01:52.275331 waagent[2678]: eth0 10813FA8 0100000A 0007 0 0 1024 FFFFFFFF 0 0 0 Jun 12 23:01:52.275331 waagent[2678]: eth0 FEA9FEA9 0100000A 0007 0 0 1024 FFFFFFFF 0 0 0 Jun 12 23:01:52.275532 waagent[2678]: 2026-06-12T23:01:52.275509Z INFO TelemetryEventsCollector ExtHandler Successfully started the TelemetryEventsCollector thread Jun 12 23:01:52.284202 waagent[2678]: 2026-06-12T23:01:52.284165Z INFO ExtHandler ExtHandler Jun 12 23:01:52.284269 waagent[2678]: 2026-06-12T23:01:52.284244Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState started [incarnation_1 channel: WireServer source: Fabric activity: 2f908bd4-313c-409b-b984-78e1d2d29ba9 correlation c32fe3aa-be38-4c37-8952-f24e6bf4ad19 created: 2026-06-12T23:00:50.433128Z] Jun 12 23:01:52.284596 waagent[2678]: 2026-06-12T23:01:52.284564Z INFO ExtHandler ExtHandler No extension handlers found, not processing anything. Jun 12 23:01:52.285046 waagent[2678]: 2026-06-12T23:01:52.285017Z INFO ExtHandler ExtHandler ProcessExtensionsGoalState completed [incarnation_1 0 ms] Jun 12 23:01:52.310426 waagent[2678]: 2026-06-12T23:01:52.310305Z INFO ExtHandler ExtHandler [HEARTBEAT] Agent WALinuxAgent-2.12.0.4 is running as the goal state agent [DEBUG HeartbeatCounter: 0;HeartbeatId: 90AD556C-57C6-455F-A755-01B4C1C919B9;DroppedPackets: 0;UpdateGSErrors: 0;AutoUpdate: 0;UpdateMode: SelfUpdate;] Jun 12 23:01:52.327862 waagent[2678]: 2026-06-12T23:01:52.327760Z INFO MonitorHandler ExtHandler Network interfaces: Jun 12 23:01:52.327862 waagent[2678]: Executing ['ip', '-a', '-o', 'link']: Jun 12 23:01:52.327862 waagent[2678]: 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\ link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 Jun 12 23:01:52.327862 waagent[2678]: 2: eth0: mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:be:e3:85 brd ff:ff:ff:ff:ff:ff\ altname enx002248bee385 Jun 12 23:01:52.327862 waagent[2678]: 3: enP52873s1: mtu 1500 qdisc mq master eth0 state UP mode DEFAULT group default qlen 1000\ link/ether 00:22:48:be:e3:85 brd ff:ff:ff:ff:ff:ff\ altname enP52873p0s2 Jun 12 23:01:52.327862 waagent[2678]: Executing ['ip', '-4', '-a', '-o', 'address']: Jun 12 23:01:52.327862 waagent[2678]: 1: lo inet 127.0.0.1/8 scope host lo\ valid_lft forever preferred_lft forever Jun 12 23:01:52.327862 waagent[2678]: 2: eth0 inet 10.0.0.35/24 metric 1024 brd 10.0.0.255 scope global eth0\ valid_lft forever preferred_lft forever Jun 12 23:01:52.327862 waagent[2678]: Executing ['ip', '-6', '-a', '-o', 'address']: Jun 12 23:01:52.327862 waagent[2678]: 1: lo inet6 ::1/128 scope host noprefixroute \ valid_lft forever preferred_lft forever Jun 12 23:01:52.327862 waagent[2678]: 2: eth0 inet6 fe80::222:48ff:febe:e385/64 scope link proto kernel_ll \ valid_lft forever preferred_lft forever Jun 12 23:01:52.386872 waagent[2678]: 2026-06-12T23:01:52.386639Z INFO EnvHandler ExtHandler Created firewall rules for the Azure Fabric: Jun 12 23:01:52.386872 waagent[2678]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Jun 12 23:01:52.386872 waagent[2678]: pkts bytes target prot opt in out source destination Jun 12 23:01:52.386872 waagent[2678]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Jun 12 23:01:52.386872 waagent[2678]: pkts bytes target prot opt in out source destination Jun 12 23:01:52.386872 waagent[2678]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Jun 12 23:01:52.386872 waagent[2678]: pkts bytes target prot opt in out source destination Jun 12 23:01:52.386872 waagent[2678]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Jun 12 23:01:52.386872 waagent[2678]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Jun 12 23:01:52.386872 waagent[2678]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Jun 12 23:01:52.389010 waagent[2678]: 2026-06-12T23:01:52.388965Z INFO EnvHandler ExtHandler Current Firewall rules: Jun 12 23:01:52.389010 waagent[2678]: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) Jun 12 23:01:52.389010 waagent[2678]: pkts bytes target prot opt in out source destination Jun 12 23:01:52.389010 waagent[2678]: Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) Jun 12 23:01:52.389010 waagent[2678]: pkts bytes target prot opt in out source destination Jun 12 23:01:52.389010 waagent[2678]: Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) Jun 12 23:01:52.389010 waagent[2678]: pkts bytes target prot opt in out source destination Jun 12 23:01:52.389010 waagent[2678]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 tcp dpt:53 Jun 12 23:01:52.389010 waagent[2678]: 0 0 ACCEPT tcp -- * * 0.0.0.0/0 168.63.129.16 owner UID match 0 Jun 12 23:01:52.389010 waagent[2678]: 0 0 DROP tcp -- * * 0.0.0.0/0 168.63.129.16 ctstate INVALID,NEW Jun 12 23:01:52.389213 waagent[2678]: 2026-06-12T23:01:52.389185Z INFO EnvHandler ExtHandler Set block dev timeout: sda with timeout: 300 Jun 12 23:02:09.233895 systemd[1]: Created slice system-sshd.slice - Slice /system/sshd. Jun 12 23:02:09.234843 systemd[1]: Started sshd@0-1-10.0.0.35:22-50.85.169.122:37186.service - OpenSSH per-connection server daemon (50.85.169.122:37186). Jun 12 23:02:09.431873 chronyd[2413]: Selected source PHC0 Jun 12 23:02:10.200665 sshd[2830]: Accepted publickey for core from 50.85.169.122 port 37186 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:10.201671 sshd-session[2830]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:10.211872 systemd[1]: Starting user@500.service - User Manager for UID 500... Jun 12 23:02:10.215166 systemd-logind[2431]: New session '3' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:10.219798 (systemd)[2834]: pam_unix(systemd-user:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:10.221926 systemd-logind[2431]: New session '4' of user 'core' with class 'manager-early' and type 'unspecified'. Jun 12 23:02:10.383953 systemd[2834]: Queued start job for default target default.target. Jun 12 23:02:10.393486 systemd[2834]: Created slice app.slice - User Application Slice. Jun 12 23:02:10.393518 systemd[2834]: Started systemd-tmpfiles-clean.timer - Daily Cleanup of User's Temporary Directories. Jun 12 23:02:10.393530 systemd[2834]: Reached target machines.target - Virtual Machines and Containers. Jun 12 23:02:10.393574 systemd[2834]: Reached target paths.target - Paths. Jun 12 23:02:10.393592 systemd[2834]: Reached target timers.target - Timers. Jun 12 23:02:10.394848 systemd[2834]: Starting dbus.socket - D-Bus User Message Bus Socket... Jun 12 23:02:10.396052 systemd[2834]: Listening on systemd-ask-password.socket - Query the User Interactively for a Password. Jun 12 23:02:10.396305 systemd[2834]: Listening on systemd-importd.socket - Disk Image Download Service Socket. Jun 12 23:02:10.397058 systemd[2834]: Listening on systemd-journalctl.socket - Journal Log Access Socket. Jun 12 23:02:10.397360 systemd[2834]: Listening on systemd-machined.socket - Virtual Machine and Container Registration Service Socket. Jun 12 23:02:10.400631 systemd[2834]: Starting systemd-tmpfiles-setup.service - Create User Files and Directories... Jun 12 23:02:10.403014 systemd[2834]: Listening on dbus.socket - D-Bus User Message Bus Socket. Jun 12 23:02:10.403144 systemd[2834]: Reached target sockets.target - Sockets. Jun 12 23:02:10.407768 systemd[2834]: Finished systemd-tmpfiles-setup.service - Create User Files and Directories. Jun 12 23:02:10.407865 systemd[2834]: Reached target basic.target - Basic System. Jun 12 23:02:10.407900 systemd[2834]: Reached target default.target - Main User Target. Jun 12 23:02:10.407920 systemd[2834]: Startup finished in 182ms. Jun 12 23:02:10.408030 systemd[1]: Started user@500.service - User Manager for UID 500. Jun 12 23:02:10.415277 systemd[1]: Started session-3.scope - Session 3 of User core. Jun 12 23:02:10.853964 systemd[1]: Started sshd@1-2-10.0.0.35:22-50.85.169.122:45964.service - OpenSSH per-connection server daemon (50.85.169.122:45964). Jun 12 23:02:11.597702 sshd[2848]: Accepted publickey for core from 50.85.169.122 port 45964 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:11.598735 sshd-session[2848]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:11.602212 systemd-logind[2431]: New session '5' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:11.612043 systemd[1]: Started session-5.scope - Session 5 of User core. Jun 12 23:02:12.027444 sshd[2852]: Connection closed by 50.85.169.122 port 45964 Jun 12 23:02:12.028059 sshd-session[2848]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:12.031299 systemd[1]: sshd@1-2-10.0.0.35:22-50.85.169.122:45964.service: Deactivated successfully. Jun 12 23:02:12.033321 systemd[1]: session-5.scope: Deactivated successfully. Jun 12 23:02:12.034910 systemd-logind[2431]: Session 5 logged out. Waiting for processes to exit. Jun 12 23:02:12.035699 systemd-logind[2431]: Removed session 5. Jun 12 23:02:12.181030 systemd[1]: Started sshd@2-4097-10.0.0.35:22-50.85.169.122:45976.service - OpenSSH per-connection server daemon (50.85.169.122:45976). Jun 12 23:02:12.922551 sshd[2858]: Accepted publickey for core from 50.85.169.122 port 45976 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:12.923552 sshd-session[2858]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:12.927169 systemd-logind[2431]: New session '6' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:12.934905 systemd[1]: Started session-6.scope - Session 6 of User core. Jun 12 23:02:13.349286 sshd[2862]: Connection closed by 50.85.169.122 port 45976 Jun 12 23:02:13.349910 sshd-session[2858]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:13.352691 systemd[1]: sshd@2-4097-10.0.0.35:22-50.85.169.122:45976.service: Deactivated successfully. Jun 12 23:02:13.354112 systemd[1]: session-6.scope: Deactivated successfully. Jun 12 23:02:13.355274 systemd-logind[2431]: Session 6 logged out. Waiting for processes to exit. Jun 12 23:02:13.356181 systemd-logind[2431]: Removed session 6. Jun 12 23:02:13.507040 systemd[1]: Started sshd@3-3-10.0.0.35:22-50.85.169.122:45982.service - OpenSSH per-connection server daemon (50.85.169.122:45982). Jun 12 23:02:14.250347 sshd[2868]: Accepted publickey for core from 50.85.169.122 port 45982 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:14.251430 sshd-session[2868]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:14.255277 systemd-logind[2431]: New session '7' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:14.265901 systemd[1]: Started session-7.scope - Session 7 of User core. Jun 12 23:02:14.680144 sshd[2872]: Connection closed by 50.85.169.122 port 45982 Jun 12 23:02:14.680682 sshd-session[2868]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:14.683151 systemd[1]: sshd@3-3-10.0.0.35:22-50.85.169.122:45982.service: Deactivated successfully. Jun 12 23:02:14.684893 systemd[1]: session-7.scope: Deactivated successfully. Jun 12 23:02:14.686149 systemd-logind[2431]: Session 7 logged out. Waiting for processes to exit. Jun 12 23:02:14.687247 systemd-logind[2431]: Removed session 7. Jun 12 23:02:14.832335 systemd[1]: Started sshd@4-4098-10.0.0.35:22-50.85.169.122:45992.service - OpenSSH per-connection server daemon (50.85.169.122:45992). Jun 12 23:02:15.577743 sshd[2878]: Accepted publickey for core from 50.85.169.122 port 45992 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:15.578557 sshd-session[2878]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:15.582330 systemd-logind[2431]: New session '8' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:15.590102 systemd[1]: Started session-8.scope - Session 8 of User core. Jun 12 23:02:15.982057 sudo[2883]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jun 12 23:02:15.982267 sudo[2883]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:02:16.039179 sudo[2883]: pam_unix(sudo:session): session closed for user root Jun 12 23:02:16.182805 sshd[2882]: Connection closed by 50.85.169.122 port 45992 Jun 12 23:02:16.182080 sshd-session[2878]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:16.184517 systemd[1]: sshd@4-4098-10.0.0.35:22-50.85.169.122:45992.service: Deactivated successfully. Jun 12 23:02:16.186277 systemd[1]: session-8.scope: Deactivated successfully. Jun 12 23:02:16.187750 systemd-logind[2431]: Session 8 logged out. Waiting for processes to exit. Jun 12 23:02:16.189270 systemd-logind[2431]: Removed session 8. Jun 12 23:02:16.336033 systemd[1]: Started sshd@5-4099-10.0.0.35:22-50.85.169.122:46004.service - OpenSSH per-connection server daemon (50.85.169.122:46004). Jun 12 23:02:17.082381 sshd[2890]: Accepted publickey for core from 50.85.169.122 port 46004 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:17.083204 sshd-session[2890]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:17.088180 systemd-logind[2431]: New session '9' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:17.093940 systemd[1]: Started session-9.scope - Session 9 of User core. Jun 12 23:02:17.371861 sudo[2896]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jun 12 23:02:17.372067 sudo[2896]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:02:17.373223 sudo[2896]: pam_unix(sudo:session): session closed for user root Jun 12 23:02:17.377950 sudo[2895]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/systemctl restart audit-rules Jun 12 23:02:17.378139 sudo[2895]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:02:17.382803 systemd[1]: Starting audit-rules.service - Load Audit Rules... Jun 12 23:02:17.407000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jun 12 23:02:17.411530 kernel: kauditd_printk_skb: 83 callbacks suppressed Jun 12 23:02:17.411574 kernel: audit: type=1305 audit(1781305337.407:183): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jun 12 23:02:17.407000 audit[2920]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd18d5d80 a2=420 a3=0 items=0 ppid=2901 pid=2920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:17.436176 augenrules[2920]: No rules Jun 12 23:02:17.436310 kernel: audit: type=1300 audit(1781305337.407:183): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd18d5d80 a2=420 a3=0 items=0 ppid=2901 pid=2920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/bin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:17.420540 systemd[1]: audit-rules.service: Deactivated successfully. Jun 12 23:02:17.420788 systemd[1]: Finished audit-rules.service - Load Audit Rules. Jun 12 23:02:17.407000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jun 12 23:02:17.437686 sudo[2895]: pam_unix(sudo:session): session closed for user root Jun 12 23:02:17.444494 kernel: audit: type=1327 audit(1781305337.407:183): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jun 12 23:02:17.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:17.456721 kernel: audit: type=1130 audit(1781305337.418:184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:17.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:17.468834 kernel: audit: type=1131 audit(1781305337.418:185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:17.436000 audit[2895]: AUDIT1106 pid=2895 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:17.481745 kernel: audit: type=1106 audit(1781305337.436:186): pid=2895 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:17.436000 audit[2895]: AUDIT1104 pid=2895 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:17.494801 kernel: audit: type=1104 audit(1781305337.436:187): pid=2895 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:17.587263 sshd[2894]: Connection closed by 50.85.169.122 port 46004 Jun 12 23:02:17.586966 sshd-session[2890]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:17.586000 audit[2890]: AUDIT1106 pid=2890 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:17.593155 systemd[1]: sshd@5-4099-10.0.0.35:22-50.85.169.122:46004.service: Deactivated successfully. Jun 12 23:02:17.594749 systemd[1]: session-9.scope: Deactivated successfully. Jun 12 23:02:17.586000 audit[2890]: AUDIT1104 pid=2890 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:17.621444 kernel: audit: type=1106 audit(1781305337.586:188): pid=2890 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:17.621502 kernel: audit: type=1104 audit(1781305337.586:189): pid=2890 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:17.621589 systemd-logind[2431]: Session 9 logged out. Waiting for processes to exit. Jun 12 23:02:17.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4099-10.0.0.35:22-50.85.169.122:46004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:17.635429 kernel: audit: type=1131 audit(1781305337.592:190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4099-10.0.0.35:22-50.85.169.122:46004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:17.636732 systemd-logind[2431]: Removed session 9. Jun 12 23:02:17.759652 systemd[1]: Started sshd@6-4100-10.0.0.35:22-50.85.169.122:46020.service - OpenSSH per-connection server daemon (50.85.169.122:46020). Jun 12 23:02:17.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4100-10.0.0.35:22-50.85.169.122:46020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:18.507000 audit[2929]: AUDIT1101 pid=2929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:18.508955 sshd[2929]: Accepted publickey for core from 50.85.169.122 port 46020 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:18.509000 audit[2929]: AUDIT1103 pid=2929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:18.509000 audit[2929]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffedbbf890 a2=3 a3=0 items=0 ppid=1 pid=2929 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:18.509000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:18.510285 sshd-session[2929]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:18.514012 systemd-logind[2431]: New session '10' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:18.522013 systemd[1]: Started session-10.scope - Session 10 of User core. Jun 12 23:02:18.523000 audit[2929]: AUDIT1105 pid=2929 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:18.524000 audit[2933]: AUDIT1103 pid=2933 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:18.857594 systemd[1]: Starting docker.service - Docker Application Container Engine... Jun 12 23:02:18.866670 (dockerd)[2935]: docker.service: Referenced but unset environment variable evaluates to an empty string: DOCKER_CGROUPS, DOCKER_OPTS, DOCKER_OPT_BIP, DOCKER_OPT_IPMASQ, DOCKER_OPT_MTU Jun 12 23:02:23.568041 dockerd[2935]: time="2026-06-12T23:02:23.567982954Z" level=info msg="Starting up" Jun 12 23:02:23.583076 dockerd[2935]: time="2026-06-12T23:02:23.583046568Z" level=info msg="OTEL tracing is not configured, using no-op tracer provider" Jun 12 23:02:23.591757 dockerd[2935]: time="2026-06-12T23:02:23.591722039Z" level=info msg="Creating a containerd client" address=/var/run/docker/libcontainerd/docker-containerd.sock timeout=1m0s Jun 12 23:02:23.708393 systemd[1]: var-lib-docker-metacopy\x2dcheck2512193316-merged.mount: Deactivated successfully. Jun 12 23:02:23.722648 dockerd[2935]: time="2026-06-12T23:02:23.722614225Z" level=info msg="Loading containers: start." Jun 12 23:02:23.784796 kernel: Initializing XFRM netlink socket Jun 12 23:02:23.836000 audit[2983]: NETFILTER_CFG table=nat:5 family=2 entries=2 op=nft_register_chain pid=2983 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.841003 kernel: kauditd_printk_skb: 8 callbacks suppressed Jun 12 23:02:23.841042 kernel: audit: type=1325 audit(1781305343.836:197): table=nat:5 family=2 entries=2 op=nft_register_chain pid=2983 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.836000 audit[2983]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd5796700 a2=0 a3=0 items=0 ppid=2935 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.865378 kernel: audit: type=1300 audit(1781305343.836:197): arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd5796700 a2=0 a3=0 items=0 ppid=2935 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.836000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jun 12 23:02:23.873758 kernel: audit: type=1327 audit(1781305343.836:197): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jun 12 23:02:23.843000 audit[2985]: NETFILTER_CFG table=filter:6 family=2 entries=2 op=nft_register_chain pid=2985 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.882554 kernel: audit: type=1325 audit(1781305343.843:198): table=filter:6 family=2 entries=2 op=nft_register_chain pid=2985 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.843000 audit[2985]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc3b2a650 a2=0 a3=0 items=0 ppid=2935 pid=2985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.900015 kernel: audit: type=1300 audit(1781305343.843:198): arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffc3b2a650 a2=0 a3=0 items=0 ppid=2935 pid=2985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.843000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jun 12 23:02:23.908269 kernel: audit: type=1327 audit(1781305343.843:198): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jun 12 23:02:23.845000 audit[2987]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_chain pid=2987 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.917837 kernel: audit: type=1325 audit(1781305343.845:199): table=filter:7 family=2 entries=1 op=nft_register_chain pid=2987 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.845000 audit[2987]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0f28ee0 a2=0 a3=0 items=0 ppid=2935 pid=2987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.935218 kernel: audit: type=1300 audit(1781305343.845:199): arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0f28ee0 a2=0 a3=0 items=0 ppid=2935 pid=2987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.845000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Jun 12 23:02:23.944273 kernel: audit: type=1327 audit(1781305343.845:199): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Jun 12 23:02:23.847000 audit[2989]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.953573 kernel: audit: type=1325 audit(1781305343.847:200): table=filter:8 family=2 entries=1 op=nft_register_chain pid=2989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.847000 audit[2989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcebfd6c0 a2=0 a3=0 items=0 ppid=2935 pid=2989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.847000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D425249444745 Jun 12 23:02:23.848000 audit[2991]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_chain pid=2991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.848000 audit[2991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe081c280 a2=0 a3=0 items=0 ppid=2935 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.848000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D4354 Jun 12 23:02:23.850000 audit[2993]: NETFILTER_CFG table=filter:10 family=2 entries=1 op=nft_register_chain pid=2993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.850000 audit[2993]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe65a8d60 a2=0 a3=0 items=0 ppid=2935 pid=2993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.850000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jun 12 23:02:23.851000 audit[2995]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_register_chain pid=2995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.851000 audit[2995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc2cd7090 a2=0 a3=0 items=0 ppid=2935 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.851000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jun 12 23:02:23.853000 audit[2997]: NETFILTER_CFG table=nat:12 family=2 entries=2 op=nft_register_chain pid=2997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.853000 audit[2997]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=384 a0=3 a1=ffffc4b17210 a2=0 a3=0 items=0 ppid=2935 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.853000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jun 12 23:02:23.975000 audit[3000]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=3000 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.975000 audit[3000]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=472 a0=3 a1=fffffc09c6c0 a2=0 a3=0 items=0 ppid=2935 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.975000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jun 12 23:02:23.976000 audit[3002]: NETFILTER_CFG table=filter:14 family=2 entries=2 op=nft_register_chain pid=3002 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.976000 audit[3002]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=340 a0=3 a1=ffffc6861470 a2=0 a3=0 items=0 ppid=2935 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.976000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D464F5257415244 Jun 12 23:02:23.978000 audit[3004]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=3004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.978000 audit[3004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=236 a0=3 a1=ffffd22b87b0 a2=0 a3=0 items=0 ppid=2935 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.978000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D425249444745 Jun 12 23:02:23.979000 audit[3006]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=3006 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.979000 audit[3006]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=248 a0=3 a1=ffffd37d1ac0 a2=0 a3=0 items=0 ppid=2935 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.979000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jun 12 23:02:23.981000 audit[3008]: NETFILTER_CFG table=filter:17 family=2 entries=1 op=nft_register_rule pid=3008 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:23.981000 audit[3008]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=232 a0=3 a1=ffffe5e697b0 a2=0 a3=0 items=0 ppid=2935 pid=3008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:23.981000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D4354 Jun 12 23:02:24.035000 audit[3038]: NETFILTER_CFG table=nat:18 family=10 entries=2 op=nft_register_chain pid=3038 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.035000 audit[3038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc042bdc0 a2=0 a3=0 items=0 ppid=2935 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.035000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jun 12 23:02:24.037000 audit[3040]: NETFILTER_CFG table=filter:19 family=10 entries=2 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.037000 audit[3040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd1e88840 a2=0 a3=0 items=0 ppid=2935 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.037000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jun 12 23:02:24.038000 audit[3042]: NETFILTER_CFG table=filter:20 family=10 entries=1 op=nft_register_chain pid=3042 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.038000 audit[3042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe0ad9c50 a2=0 a3=0 items=0 ppid=2935 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.038000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 Jun 12 23:02:24.039000 audit[3044]: NETFILTER_CFG table=filter:21 family=10 entries=1 op=nft_register_chain pid=3044 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.039000 audit[3044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd2d2d330 a2=0 a3=0 items=0 ppid=2935 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.039000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D425249444745 Jun 12 23:02:24.041000 audit[3046]: NETFILTER_CFG table=filter:22 family=10 entries=1 op=nft_register_chain pid=3046 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.041000 audit[3046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcabc3b50 a2=0 a3=0 items=0 ppid=2935 pid=3046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.041000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D4354 Jun 12 23:02:24.042000 audit[3048]: NETFILTER_CFG table=filter:23 family=10 entries=1 op=nft_register_chain pid=3048 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.042000 audit[3048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffcfdf680 a2=0 a3=0 items=0 ppid=2935 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.042000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jun 12 23:02:24.044000 audit[3050]: NETFILTER_CFG table=filter:24 family=10 entries=1 op=nft_register_chain pid=3050 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.044000 audit[3050]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff82fa0d0 a2=0 a3=0 items=0 ppid=2935 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.044000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jun 12 23:02:24.045000 audit[3052]: NETFILTER_CFG table=nat:25 family=10 entries=2 op=nft_register_chain pid=3052 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.045000 audit[3052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=384 a0=3 a1=ffffd5a33500 a2=0 a3=0 items=0 ppid=2935 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.045000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jun 12 23:02:24.047000 audit[3054]: NETFILTER_CFG table=nat:26 family=10 entries=2 op=nft_register_chain pid=3054 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.047000 audit[3054]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=484 a0=3 a1=fffffdee9fc0 a2=0 a3=0 items=0 ppid=2935 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.047000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003A3A312F313238 Jun 12 23:02:24.048000 audit[3056]: NETFILTER_CFG table=filter:27 family=10 entries=2 op=nft_register_chain pid=3056 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.048000 audit[3056]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=340 a0=3 a1=ffffdc1181c0 a2=0 a3=0 items=0 ppid=2935 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.048000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D464F5257415244 Jun 12 23:02:24.050000 audit[3058]: NETFILTER_CFG table=filter:28 family=10 entries=1 op=nft_register_rule pid=3058 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.050000 audit[3058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=236 a0=3 a1=ffffd7c2d6e0 a2=0 a3=0 items=0 ppid=2935 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.050000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D425249444745 Jun 12 23:02:24.051000 audit[3060]: NETFILTER_CFG table=filter:29 family=10 entries=1 op=nft_register_rule pid=3060 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.051000 audit[3060]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=248 a0=3 a1=ffffd9d9b270 a2=0 a3=0 items=0 ppid=2935 pid=3060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.051000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jun 12 23:02:24.053000 audit[3062]: NETFILTER_CFG table=filter:30 family=10 entries=1 op=nft_register_rule pid=3062 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.053000 audit[3062]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=232 a0=3 a1=fffffc77ab30 a2=0 a3=0 items=0 ppid=2935 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.053000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900444F434B45522D464F5257415244002D6A00444F434B45522D4354 Jun 12 23:02:24.057000 audit[3067]: NETFILTER_CFG table=filter:31 family=2 entries=1 op=nft_register_chain pid=3067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:24.057000 audit[3067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffefadf100 a2=0 a3=0 items=0 ppid=2935 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.057000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jun 12 23:02:24.058000 audit[3069]: NETFILTER_CFG table=filter:32 family=2 entries=1 op=nft_register_rule pid=3069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:24.058000 audit[3069]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcc5e15c0 a2=0 a3=0 items=0 ppid=2935 pid=3069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.058000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jun 12 23:02:24.059000 audit[3071]: NETFILTER_CFG table=filter:33 family=10 entries=1 op=nft_register_chain pid=3071 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.059000 audit[3071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd0d542a0 a2=0 a3=0 items=0 ppid=2935 pid=3071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.059000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jun 12 23:02:24.061000 audit[3073]: NETFILTER_CFG table=filter:34 family=10 entries=1 op=nft_register_rule pid=3073 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jun 12 23:02:24.061000 audit[3073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd9abc060 a2=0 a3=0 items=0 ppid=2935 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.061000 audit: PROCTITLE proctitle=2F7573722F62696E2F6970367461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jun 12 23:02:24.130000 audit[3078]: NETFILTER_CFG table=nat:35 family=2 entries=2 op=nft_register_chain pid=3078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:24.130000 audit[3078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=520 a0=3 a1=ffffce539950 a2=0 a3=0 items=0 ppid=2935 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.130000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jun 12 23:02:24.133000 audit[3080]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=3080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:24.133000 audit[3080]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffcbd45d40 a2=0 a3=0 items=0 ppid=2935 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.133000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jun 12 23:02:24.139000 audit[3088]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_rule pid=3088 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:24.139000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=300 a0=3 a1=ffffe5b12da0 a2=0 a3=0 items=0 ppid=2935 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.139000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D464F5257415244002D6900646F636B657230002D6A00414343455054 Jun 12 23:02:24.142000 audit[3093]: NETFILTER_CFG table=filter:38 family=2 entries=1 op=nft_register_rule pid=3093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:24.142000 audit[3093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdde5f620 a2=0 a3=0 items=0 ppid=2935 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.142000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45520000002D6900646F636B657230002D6F00646F636B657230002D6A0044524F50 Jun 12 23:02:24.144000 audit[3095]: NETFILTER_CFG table=filter:39 family=2 entries=1 op=nft_register_rule pid=3095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:24.144000 audit[3095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=512 a0=3 a1=ffffc6cd7040 a2=0 a3=0 items=0 ppid=2935 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.144000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D4354002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jun 12 23:02:24.146000 audit[3097]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_rule pid=3097 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:24.146000 audit[3097]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd8148740 a2=0 a3=0 items=0 ppid=2935 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.146000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D425249444745002D6F00646F636B657230002D6A00444F434B4552 Jun 12 23:02:24.147000 audit[3099]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_rule pid=3099 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:24.147000 audit[3099]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe4b161b0 a2=0 a3=0 items=0 ppid=2935 pid=3099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.147000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jun 12 23:02:24.149000 audit[3101]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_rule pid=3101 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:24.149000 audit[3101]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc4beea80 a2=0 a3=0 items=0 ppid=2935 pid=3101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:24.149000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jun 12 23:02:24.151831 systemd-networkd[2176]: docker0: Link UP Jun 12 23:02:24.169812 dockerd[2935]: time="2026-06-12T23:02:24.169338954Z" level=info msg="Loading containers: done." Jun 12 23:02:24.307951 dockerd[2935]: time="2026-06-12T23:02:24.307908112Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jun 12 23:02:24.308207 dockerd[2935]: time="2026-06-12T23:02:24.308190713Z" level=info msg="Docker daemon" commit=45873be4ae3f5488c9498b3d9f17deaddaf609f4 containerd-snapshotter=false storage-driver=overlay2 version=28.2.2 Jun 12 23:02:24.308488 dockerd[2935]: time="2026-06-12T23:02:24.308406741Z" level=info msg="Initializing buildkit" Jun 12 23:02:24.356996 dockerd[2935]: time="2026-06-12T23:02:24.356940385Z" level=warning msg="CDI setup error /var/run/cdi: failed to monitor for changes: no such file or directory" Jun 12 23:02:24.357127 dockerd[2935]: time="2026-06-12T23:02:24.357113096Z" level=warning msg="CDI setup error /etc/cdi: failed to monitor for changes: no such file or directory" Jun 12 23:02:24.404774 dockerd[2935]: time="2026-06-12T23:02:24.404662672Z" level=info msg="Completed buildkit initialization" Jun 12 23:02:24.423099 dockerd[2935]: time="2026-06-12T23:02:24.423054567Z" level=info msg="Daemon has completed initialization" Jun 12 23:02:24.423217 dockerd[2935]: time="2026-06-12T23:02:24.423104229Z" level=info msg="API listen on /run/docker.sock" Jun 12 23:02:24.423821 systemd[1]: Started docker.service - Docker Application Container Engine. Jun 12 23:02:24.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:24.571279 sshd[2933]: Connection closed by 50.85.169.122 port 46020 Jun 12 23:02:24.571585 sshd-session[2929]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:24.571000 audit[2929]: AUDIT1106 pid=2929 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:24.571000 audit[2929]: AUDIT1104 pid=2929 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:24.574503 systemd[1]: sshd@6-4100-10.0.0.35:22-50.85.169.122:46020.service: Deactivated successfully. Jun 12 23:02:24.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4100-10.0.0.35:22-50.85.169.122:46020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:24.575958 systemd[1]: session-10.scope: Deactivated successfully. Jun 12 23:02:24.577318 systemd-logind[2431]: Session 10 logged out. Waiting for processes to exit. Jun 12 23:02:24.578214 systemd-logind[2431]: Removed session 10. Jun 12 23:02:24.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4-10.0.0.35:22-50.85.169.122:47244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:24.726621 systemd[1]: Started sshd@7-4-10.0.0.35:22-50.85.169.122:47244.service - OpenSSH per-connection server daemon (50.85.169.122:47244). Jun 12 23:02:25.472000 audit[3139]: AUDIT1101 pid=3139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:25.473216 sshd[3139]: Accepted publickey for core from 50.85.169.122 port 47244 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:25.472000 audit[3139]: AUDIT1103 pid=3139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:25.473000 audit[3139]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd96f16c0 a2=3 a3=0 items=0 ppid=1 pid=3139 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:25.473000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:25.474405 sshd-session[3139]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:25.478649 systemd-logind[2431]: New session '11' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:25.484939 systemd[1]: Started session-11.scope - Session 11 of User core. Jun 12 23:02:25.486000 audit[3139]: AUDIT1105 pid=3139 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:25.487000 audit[3143]: AUDIT1103 pid=3143 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:25.763000 audit[3148]: AUDIT1101 pid=3148 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.764000 audit[3148]: AUDIT1110 pid=3148 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.764000 audit[3148]: AUDIT1105 pid=3148 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.764810 sudo[3148]: core : PWD=/tmp/tmp.8KuN7JlPUg ; USER=root ; COMMAND=/usr/sbin/ldd /usr/bin/sleep Jun 12 23:02:25.765013 sudo[3148]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:02:25.784392 sudo[3148]: pam_unix(sudo:session): session closed for user root Jun 12 23:02:25.783000 audit[3148]: AUDIT1106 pid=3148 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.783000 audit[3148]: AUDIT1104 pid=3148 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.804000 audit[3157]: AUDIT1101 pid=3157 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.805095 sudo[3157]: core : PWD=/tmp/tmp.8KuN7JlPUg ; USER=root ; COMMAND=/usr/sbin/rsync -av --relative --copy-links /usr/bin/sleep /lib/ld-linux-aarch64.so.1 /lib64/ld-linux-aarch64.so.1 /lib64/libc.so.6 ./ Jun 12 23:02:25.805318 sudo[3157]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:02:25.804000 audit[3157]: AUDIT1110 pid=3157 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.804000 audit[3157]: AUDIT1105 pid=3157 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.913148 sudo[3157]: pam_unix(sudo:session): session closed for user root Jun 12 23:02:25.912000 audit[3157]: AUDIT1106 pid=3157 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.912000 audit[3157]: AUDIT1104 pid=3157 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.917000 audit[3144]: AUDIT1101 pid=3144 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.918333 sudo[3144]: core : PWD=/tmp/tmp.8KuN7JlPUg ; USER=root ; COMMAND=/usr/sbin/docker build -t sleep . Jun 12 23:02:25.918541 sudo[3144]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:02:25.917000 audit[3144]: AUDIT1110 pid=3144 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:25.917000 audit[3144]: AUDIT1105 pid=3144 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:26.380397 kernel: hv_balloon: Max. dynamic memory size: 4096 MB Jun 12 23:02:31.673892 update_engine[2440]: I20260612 23:02:31.673815 2440 update_attempter.cc:509] Updating boot flags... Jun 12 23:02:35.455138 dockerd[2935]: 2026/06/12 23:02:35 http2: server: error reading preface from client @: read unix /run/docker.sock->@: read: connection reset by peer Jun 12 23:02:35.929563 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount3230114118.mount: Deactivated successfully. Jun 12 23:02:36.127000 audit[3144]: AUDIT1106 pid=3144 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:36.128324 sudo[3144]: pam_unix(sudo:session): session closed for user root Jun 12 23:02:36.131681 kernel: kauditd_printk_skb: 129 callbacks suppressed Jun 12 23:02:36.131728 kernel: audit: type=1106 audit(1781305356.127:258): pid=3144 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:36.127000 audit[3144]: AUDIT1104 pid=3144 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:36.145976 kernel: audit: type=1104 audit(1781305356.127:259): pid=3144 uid=500 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:36.270892 sshd[3143]: Connection closed by 50.85.169.122 port 47244 Jun 12 23:02:36.271126 sshd-session[3139]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:36.271000 audit[3139]: AUDIT1106 pid=3139 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:36.292280 systemd[1]: sshd@7-4-10.0.0.35:22-50.85.169.122:47244.service: Deactivated successfully. Jun 12 23:02:36.271000 audit[3139]: AUDIT1104 pid=3139 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:36.294074 systemd[1]: session-11.scope: Deactivated successfully. Jun 12 23:02:36.308901 kernel: audit: type=1106 audit(1781305356.271:260): pid=3139 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:36.295812 systemd[1]: session-11.scope: Consumed 302ms CPU time over 10.809s wall clock time, 122.3M memory peak. Jun 12 23:02:36.308984 kernel: audit: type=1104 audit(1781305356.271:261): pid=3139 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:36.309140 systemd-logind[2431]: Session 11 logged out. Waiting for processes to exit. Jun 12 23:02:36.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4-10.0.0.35:22-50.85.169.122:47244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:36.325103 systemd-logind[2431]: Removed session 11. Jun 12 23:02:36.325812 kernel: audit: type=1131 audit(1781305356.291:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4-10.0.0.35:22-50.85.169.122:47244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:36.422000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-10.0.0.35:22-50.85.169.122:59346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:36.423153 systemd[1]: Started sshd@8-5-10.0.0.35:22-50.85.169.122:59346.service - OpenSSH per-connection server daemon (50.85.169.122:59346). Jun 12 23:02:36.439789 kernel: audit: type=1130 audit(1781305356.422:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-10.0.0.35:22-50.85.169.122:59346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.184000 audit[3321]: AUDIT1101 pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:37.185953 sshd[3321]: Accepted publickey for core from 50.85.169.122 port 59346 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:37.202328 sshd-session[3321]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:37.201000 audit[3321]: AUDIT1103 pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:37.218267 kernel: audit: type=1101 audit(1781305357.184:264): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:37.218342 kernel: audit: type=1103 audit(1781305357.201:265): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:37.228814 kernel: audit: type=1006 audit(1781305357.201:266): pid=3321 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jun 12 23:02:37.231406 systemd-logind[2431]: New session '12' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:37.201000 audit[3321]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc55b4ec0 a2=3 a3=0 items=0 ppid=1 pid=3321 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:37.249152 kernel: audit: type=1300 audit(1781305357.201:266): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc55b4ec0 a2=3 a3=0 items=0 ppid=1 pid=3321 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:37.201000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:37.256954 systemd[1]: Started session-12.scope - Session 12 of User core. Jun 12 23:02:37.258000 audit[3321]: AUDIT1105 pid=3321 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:37.260000 audit[3325]: AUDIT1103 pid=3325 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:37.623532 sshd[3325]: Connection closed by 50.85.169.122 port 59346 Jun 12 23:02:37.624983 sshd-session[3321]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:37.624000 audit[3321]: AUDIT1106 pid=3321 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:37.624000 audit[3321]: AUDIT1104 pid=3321 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:37.627410 systemd[1]: sshd@8-5-10.0.0.35:22-50.85.169.122:59346.service: Deactivated successfully. Jun 12 23:02:37.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-10.0.0.35:22-50.85.169.122:59346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.629369 systemd[1]: session-12.scope: Deactivated successfully. Jun 12 23:02:37.630769 systemd-logind[2431]: Session 12 logged out. Waiting for processes to exit. Jun 12 23:02:37.632450 systemd-logind[2431]: Removed session 12. Jun 12 23:02:37.804030 systemd[1]: Started sshd@10-7-10.0.0.35:22-50.85.169.122:59380.service - OpenSSH per-connection server daemon (50.85.169.122:59380). Jun 12 23:02:37.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-7-10.0.0.35:22-50.85.169.122:59380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-8-10.0.0.35:22-50.85.169.122:59400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.805977 systemd[1]: Started sshd@11-8-10.0.0.35:22-50.85.169.122:59400.service - OpenSSH per-connection server daemon (50.85.169.122:59400). Jun 12 23:02:37.807053 systemd[1]: Started sshd@12-9-10.0.0.35:22-50.85.169.122:59366.service - OpenSSH per-connection server daemon (50.85.169.122:59366). Jun 12 23:02:37.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-9-10.0.0.35:22-50.85.169.122:59366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10-10.0.0.35:22-50.85.169.122:59386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.811022 systemd[1]: Started sshd@13-10-10.0.0.35:22-50.85.169.122:59386.service - OpenSSH per-connection server daemon (50.85.169.122:59386). Jun 12 23:02:37.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-11-10.0.0.35:22-50.85.169.122:59388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.816066 systemd[1]: Started sshd@14-11-10.0.0.35:22-50.85.169.122:59388.service - OpenSSH per-connection server daemon (50.85.169.122:59388). Jun 12 23:02:37.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-12-10.0.0.35:22-50.85.169.122:59350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.819056 systemd[1]: Started sshd@15-12-10.0.0.35:22-50.85.169.122:59350.service - OpenSSH per-connection server daemon (50.85.169.122:59350). Jun 12 23:02:37.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-13-10.0.0.35:22-50.85.169.122:59390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.820631 systemd[1]: Started sshd@16-13-10.0.0.35:22-50.85.169.122:59390.service - OpenSSH per-connection server daemon (50.85.169.122:59390). Jun 12 23:02:37.821835 systemd[1]: Started sshd@17-14-10.0.0.35:22-50.85.169.122:59430.service - OpenSSH per-connection server daemon (50.85.169.122:59430). Jun 12 23:02:37.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-14-10.0.0.35:22-50.85.169.122:59430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.826151 systemd[1]: Started sshd@18-15-10.0.0.35:22-50.85.169.122:59432.service - OpenSSH per-connection server daemon (50.85.169.122:59432). Jun 12 23:02:37.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-15-10.0.0.35:22-50.85.169.122:59432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-6-10.0.0.35:22-50.85.169.122:59364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:37.831145 systemd[1]: Started sshd@9-6-10.0.0.35:22-50.85.169.122:59364.service - OpenSSH per-connection server daemon (50.85.169.122:59364). Jun 12 23:02:38.571000 audit[3348]: AUDIT1101 pid=3348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.572675 sshd[3348]: Accepted publickey for core from 50.85.169.122 port 59380 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:38.572000 audit[3348]: AUDIT1103 pid=3348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.572000 audit[3348]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdfa0db70 a2=3 a3=0 items=0 ppid=1 pid=3348 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:38.572000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:38.573818 sshd-session[3348]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:38.576000 audit[3349]: AUDIT1101 pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.577856 sshd[3349]: Accepted publickey for core from 50.85.169.122 port 59400 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:38.578745 systemd-logind[2431]: New session '13' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:38.578000 audit[3349]: AUDIT1103 pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.578000 audit[3349]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff800bea0 a2=3 a3=0 items=0 ppid=1 pid=3349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:38.578000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:38.579865 sshd-session[3349]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:38.583910 systemd[1]: Started session-13.scope - Session 13 of User core. Jun 12 23:02:38.585000 audit[3348]: AUDIT1105 pid=3348 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.587000 audit[3381]: AUDIT1103 pid=3381 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.590000 audit[3350]: AUDIT1101 pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.591207 sshd[3350]: Accepted publickey for core from 50.85.169.122 port 59366 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:38.591194 systemd-logind[2431]: New session '14' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:38.591000 audit[3350]: AUDIT1103 pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.591000 audit[3350]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc9e13710 a2=3 a3=0 items=0 ppid=1 pid=3350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:38.591000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:38.592722 sshd-session[3350]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:38.595054 systemd[1]: Started session-14.scope - Session 14 of User core. Jun 12 23:02:38.597000 audit[3349]: AUDIT1105 pid=3349 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.600024 systemd-logind[2431]: New session '15' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:38.599000 audit[3383]: AUDIT1103 pid=3383 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.602000 audit[3354]: AUDIT1101 pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.603155 sshd[3354]: Accepted publickey for core from 50.85.169.122 port 59350 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:38.602000 audit[3357]: AUDIT1101 pid=3357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.603604 sshd[3357]: Accepted publickey for core from 50.85.169.122 port 59432 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:38.603000 audit[3357]: AUDIT1103 pid=3357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.603000 audit[3357]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffefcce1a0 a2=3 a3=0 items=0 ppid=1 pid=3357 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:38.603000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:38.604920 systemd[1]: Started session-15.scope - Session 15 of User core. Jun 12 23:02:38.604000 audit[3354]: AUDIT1103 pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.604000 audit[3354]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd90a3d10 a2=3 a3=0 items=0 ppid=1 pid=3354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:38.604000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:38.605831 sshd-session[3354]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:38.607426 sshd-session[3357]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:38.607000 audit[3353]: AUDIT1101 pid=3353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.608541 sshd[3353]: Accepted publickey for core from 50.85.169.122 port 59388 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:38.607000 audit[3350]: AUDIT1105 pid=3350 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.610000 audit[3353]: AUDIT1103 pid=3353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.610000 audit[3353]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd5fb67a0 a2=3 a3=0 items=0 ppid=1 pid=3353 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:38.610000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:38.611000 audit[3388]: AUDIT1103 pid=3388 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.614025 sshd-session[3353]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:38.613000 audit[3351]: AUDIT1101 pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.614903 sshd[3351]: Accepted publickey for core from 50.85.169.122 port 59386 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:38.614000 audit[3351]: AUDIT1103 pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.615000 audit[3351]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff11ca440 a2=3 a3=0 items=0 ppid=1 pid=3351 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:38.615000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:38.617478 sshd-session[3351]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:38.617000 audit[3356]: AUDIT1101 pid=3356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.618869 systemd-logind[2431]: New session '16' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:38.619886 sshd[3356]: Accepted publickey for core from 50.85.169.122 port 59430 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:38.620912 systemd[1]: Started session-16.scope - Session 16 of User core. Jun 12 23:02:38.622000 audit[3356]: AUDIT1103 pid=3356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.622000 audit[3356]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffeac16170 a2=3 a3=0 items=0 ppid=1 pid=3356 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:38.622000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:38.623178 sshd-session[3356]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:38.624519 systemd-logind[2431]: New session '17' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:38.624000 audit[3358]: AUDIT1101 pid=3358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.624000 audit[3355]: AUDIT1101 pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.626228 sshd[3355]: Accepted publickey for core from 50.85.169.122 port 59390 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:38.626000 audit[3355]: AUDIT1103 pid=3355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.626000 audit[3355]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc3f2c640 a2=3 a3=0 items=0 ppid=1 pid=3355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:38.626000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:38.626000 audit[3358]: AUDIT1103 pid=3358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.626000 audit[3358]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffab075c0 a2=3 a3=0 items=0 ppid=1 pid=3358 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:38.626000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:38.627384 sshd-session[3355]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:38.627636 sshd[3358]: Accepted publickey for core from 50.85.169.122 port 59364 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:38.628695 sshd-session[3358]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:38.628934 systemd[1]: Started session-17.scope - Session 17 of User core. Jun 12 23:02:38.632082 systemd-logind[2431]: New session '18' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:38.632677 systemd[1]: Started session-18.scope - Session 18 of User core. Jun 12 23:02:38.635103 systemd-logind[2431]: New session '19' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:38.635430 systemd[1]: Started session-19.scope - Session 19 of User core. Jun 12 23:02:38.638002 systemd-logind[2431]: New session '20' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:38.638365 systemd[1]: Started session-20.scope - Session 20 of User core. Jun 12 23:02:38.640918 systemd-logind[2431]: New session '22' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:38.641270 systemd[1]: Started session-22.scope - Session 22 of User core. Jun 12 23:02:38.643741 systemd-logind[2431]: New session '21' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:38.644157 systemd[1]: Started session-21.scope - Session 21 of User core. Jun 12 23:02:38.646000 audit[3357]: AUDIT1105 pid=3357 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.647000 audit[3354]: AUDIT1105 pid=3354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.649000 audit[3395]: AUDIT1103 pid=3395 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.652000 audit[3356]: AUDIT1105 pid=3356 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.654000 audit[3351]: AUDIT1105 pid=3351 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.654000 audit[3358]: AUDIT1105 pid=3358 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.654000 audit[3353]: AUDIT1105 pid=3353 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.655000 audit[3396]: AUDIT1103 pid=3396 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.657000 audit[3400]: AUDIT1103 pid=3400 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.657000 audit[3402]: AUDIT1103 pid=3402 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.659000 audit[3355]: AUDIT1105 pid=3355 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.660000 audit[3398]: AUDIT1103 pid=3398 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.661000 audit[3403]: AUDIT1103 pid=3403 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.662000 audit[3401]: AUDIT1103 pid=3401 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:38.915043 systemd[1]: var-lib-docker-overlay2-5373cbcdd8b83c6f9332efbbd29bc509216be41c9f2951afe0e8ec3dd82ec3ed\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:38.915412 systemd[1]: var-lib-docker-overlay2-5d19d9d457c25716bafa0e0abdd90e6f7502b7fee55b2508df4c4d0387c15455\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:39.180849 containerd[2455]: time="2026-06-12T23:02:39.180587009Z" level=info msg="connecting to shim 7ae678718ca06a1f9238e5513a5856a50815d1b3a532b9d3e78460c7408f59e0" address="unix:///run/containerd/s/fd577ed3149a24c47651dc958e33ce67fd647569e9db2a8b57045b11519e5e76" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:39.211958 systemd[1]: Started docker-7ae678718ca06a1f9238e5513a5856a50815d1b3a532b9d3e78460c7408f59e0.scope - libcontainer container 7ae678718ca06a1f9238e5513a5856a50815d1b3a532b9d3e78460c7408f59e0. Jun 12 23:02:39.223000 audit: BPF prog-id=59 op=LOAD Jun 12 23:02:39.224000 audit: BPF prog-id=60 op=LOAD Jun 12 23:02:39.224000 audit[3522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=55fdbb6bbf80 a2=98 a3=0 items=0 ppid=3511 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37616536373837313863613036613166393233386535353133 Jun 12 23:02:39.224000 audit: BPF prog-id=60 op=UNLOAD Jun 12 23:02:39.224000 audit[3522]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3511 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37616536373837313863613036613166393233386535353133 Jun 12 23:02:39.225000 audit: BPF prog-id=61 op=LOAD Jun 12 23:02:39.225000 audit[3522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=55fdbb6bc258 a2=98 a3=0 items=0 ppid=3511 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37616536373837313863613036613166393233386535353133 Jun 12 23:02:39.225000 audit: BPF prog-id=62 op=LOAD Jun 12 23:02:39.225000 audit[3522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=55fdbb6bbf98 a2=98 a3=0 items=0 ppid=3511 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37616536373837313863613036613166393233386535353133 Jun 12 23:02:39.225000 audit: BPF prog-id=62 op=UNLOAD Jun 12 23:02:39.225000 audit[3522]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3511 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37616536373837313863613036613166393233386535353133 Jun 12 23:02:39.225000 audit: BPF prog-id=61 op=UNLOAD Jun 12 23:02:39.225000 audit[3522]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3511 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37616536373837313863613036613166393233386535353133 Jun 12 23:02:39.225000 audit: BPF prog-id=63 op=LOAD Jun 12 23:02:39.225000 audit[3522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=55fdbb6bc4a8 a2=98 a3=0 items=0 ppid=3511 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37616536373837313863613036613166393233386535353133 Jun 12 23:02:39.230232 containerd[2455]: time="2026-06-12T23:02:39.230197005Z" level=info msg="connecting to shim 7006cadda8677fd45a7c80aa5adfab5371a7bdb831026a1c01de3baf10dd672b" address="unix:///run/containerd/s/bcef072db188131e5975d0e611c8cb7d41bc80b963f03a73329e5e74844a785a" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:39.252808 containerd[2455]: time="2026-06-12T23:02:39.252307578Z" level=info msg="connecting to shim 57158ea6fd49eee94eb8627435b634d5b1ac80b32251431c9dd98667366dcd46" address="unix:///run/containerd/s/d8260735ec46898c9375fe9f4bd70c5c72e1581b9fdbf2b765def19ba7666b21" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:39.254111 systemd[1]: Started docker-7006cadda8677fd45a7c80aa5adfab5371a7bdb831026a1c01de3baf10dd672b.scope - libcontainer container 7006cadda8677fd45a7c80aa5adfab5371a7bdb831026a1c01de3baf10dd672b. Jun 12 23:02:39.266000 audit: BPF prog-id=64 op=LOAD Jun 12 23:02:39.267000 audit: BPF prog-id=65 op=LOAD Jun 12 23:02:39.267000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=535a4172ff80 a2=98 a3=0 items=0 ppid=3548 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37303036636164646138363737666434356137633830616135 Jun 12 23:02:39.267000 audit: BPF prog-id=65 op=UNLOAD Jun 12 23:02:39.267000 audit[3561]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3548 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37303036636164646138363737666434356137633830616135 Jun 12 23:02:39.267000 audit: BPF prog-id=66 op=LOAD Jun 12 23:02:39.267000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=535a41730258 a2=98 a3=0 items=0 ppid=3548 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37303036636164646138363737666434356137633830616135 Jun 12 23:02:39.267000 audit: BPF prog-id=67 op=LOAD Jun 12 23:02:39.267000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=535a4172ff98 a2=98 a3=0 items=0 ppid=3548 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37303036636164646138363737666434356137633830616135 Jun 12 23:02:39.267000 audit: BPF prog-id=67 op=UNLOAD Jun 12 23:02:39.267000 audit[3561]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3548 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37303036636164646138363737666434356137633830616135 Jun 12 23:02:39.267000 audit: BPF prog-id=66 op=UNLOAD Jun 12 23:02:39.267000 audit[3561]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3548 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37303036636164646138363737666434356137633830616135 Jun 12 23:02:39.267000 audit: BPF prog-id=68 op=LOAD Jun 12 23:02:39.267000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=535a417304a8 a2=98 a3=0 items=0 ppid=3548 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37303036636164646138363737666434356137633830616135 Jun 12 23:02:39.272939 systemd[1]: Started docker-57158ea6fd49eee94eb8627435b634d5b1ac80b32251431c9dd98667366dcd46.scope - libcontainer container 57158ea6fd49eee94eb8627435b634d5b1ac80b32251431c9dd98667366dcd46. Jun 12 23:02:39.299835 kernel: docker0: port 1(veth9014ded) entered blocking state Jun 12 23:02:39.299921 kernel: docker0: port 1(veth9014ded) entered disabled state Jun 12 23:02:39.299000 audit: BPF prog-id=69 op=LOAD Jun 12 23:02:39.299000 audit: BPF prog-id=70 op=LOAD Jun 12 23:02:39.299000 audit[3597]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=a459cadbf80 a2=98 a3=0 items=0 ppid=3581 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373135386561366664343965656539346562383632373433 Jun 12 23:02:39.300000 audit: BPF prog-id=70 op=UNLOAD Jun 12 23:02:39.300000 audit[3597]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3581 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373135386561366664343965656539346562383632373433 Jun 12 23:02:39.300000 audit: BPF prog-id=71 op=LOAD Jun 12 23:02:39.300000 audit[3597]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=a459cadc258 a2=98 a3=0 items=0 ppid=3581 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373135386561366664343965656539346562383632373433 Jun 12 23:02:39.300000 audit: BPF prog-id=72 op=LOAD Jun 12 23:02:39.300000 audit[3597]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=a459cadbf98 a2=98 a3=0 items=0 ppid=3581 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373135386561366664343965656539346562383632373433 Jun 12 23:02:39.300000 audit: BPF prog-id=72 op=UNLOAD Jun 12 23:02:39.300000 audit[3597]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3581 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373135386561366664343965656539346562383632373433 Jun 12 23:02:39.300000 audit: BPF prog-id=71 op=UNLOAD Jun 12 23:02:39.300000 audit[3597]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3581 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373135386561366664343965656539346562383632373433 Jun 12 23:02:39.300000 audit: BPF prog-id=73 op=LOAD Jun 12 23:02:39.300000 audit[3597]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=a459cadc4a8 a2=98 a3=0 items=0 ppid=3581 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35373135386561366664343965656539346562383632373433 Jun 12 23:02:39.303162 containerd[2455]: time="2026-06-12T23:02:39.303131430Z" level=info msg="connecting to shim 8d62b9358435a85786e08299251f6f5d93d1a9b7458cd1ac98192f9969f7ad17" address="unix:///run/containerd/s/53dbf842bdb00f08e5adc5b2a50110948ed7de8ea8784b6b07df7ca61f80fe27" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:39.307830 kernel: veth9014ded: entered allmulticast mode Jun 12 23:02:39.286000 audit: ANOM_PROMISCUOUS dev=veth9014ded prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.315408 kernel: veth9014ded: entered promiscuous mode Jun 12 23:02:39.286000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c614a50 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.286000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.327000 audit[3676]: NETFILTER_CFG table=raw:43 family=2 entries=3 op=nft_register_chain pid=3676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.327000 audit[3676]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffae404a0 a2=0 a3=0 items=0 ppid=2935 pid=3676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.327000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.329604 systemd-networkd[2176]: veth9014ded: Link UP Jun 12 23:02:39.336946 systemd[1]: Started docker-8d62b9358435a85786e08299251f6f5d93d1a9b7458cd1ac98192f9969f7ad17.scope - libcontainer container 8d62b9358435a85786e08299251f6f5d93d1a9b7458cd1ac98192f9969f7ad17. Jun 12 23:02:39.337712 containerd[2455]: time="2026-06-12T23:02:39.335569138Z" level=info msg="connecting to shim 365cbd8fe245464a8c01cb5d02290bea5cefb45a8a12983f8980f0f54fa2b71f" address="unix:///run/containerd/s/ff332b19b50e2119ad69c8f3bb4fdc215c38eae37a312f48dafc8f8c5bace0a4" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:39.351460 kernel: docker0: port 2(veth85d8b16) entered blocking state Jun 12 23:02:39.351536 kernel: docker0: port 2(veth85d8b16) entered disabled state Jun 12 23:02:39.354839 kernel: veth85d8b16: entered allmulticast mode Jun 12 23:02:39.360147 kernel: veth85d8b16: entered promiscuous mode Jun 12 23:02:39.361433 containerd[2455]: time="2026-06-12T23:02:39.361125865Z" level=info msg="connecting to shim 356f3de4391957e7705eb4caebdc475c812fcad83b02c1473d2432f85fbc98b4" address="unix:///run/containerd/s/cdab55f9be1cd1f15f25d5eac139df4108a2ea668cd5404cfd5626a269d90ea9" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:39.339000 audit: ANOM_PROMISCUOUS dev=veth85d8b16 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.339000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c614690 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.339000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.370972 systemd[1]: Started docker-365cbd8fe245464a8c01cb5d02290bea5cefb45a8a12983f8980f0f54fa2b71f.scope - libcontainer container 365cbd8fe245464a8c01cb5d02290bea5cefb45a8a12983f8980f0f54fa2b71f. Jun 12 23:02:39.370000 audit[3746]: NETFILTER_CFG table=raw:44 family=2 entries=1 op=nft_register_rule pid=3746 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.370000 audit[3746]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffea633cf0 a2=0 a3=0 items=0 ppid=2935 pid=3746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.370000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.373797 kernel: eth0: renamed from veth0158cb1 Jun 12 23:02:39.379337 systemd-networkd[2176]: veth85d8b16: Link UP Jun 12 23:02:39.385418 kernel: docker0: port 1(veth9014ded) entered blocking state Jun 12 23:02:39.385357 systemd-networkd[2176]: veth9014ded: Gained carrier Jun 12 23:02:39.385465 kernel: docker0: port 1(veth9014ded) entered forwarding state Jun 12 23:02:39.388000 audit: BPF prog-id=74 op=LOAD Jun 12 23:02:39.389361 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:39.389000 audit: BPF prog-id=75 op=LOAD Jun 12 23:02:39.389000 audit[3644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=160889323f80 a2=98 a3=0 items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643632623933353834333561383537383665303832393932 Jun 12 23:02:39.389000 audit: BPF prog-id=75 op=UNLOAD Jun 12 23:02:39.389000 audit[3644]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643632623933353834333561383537383665303832393932 Jun 12 23:02:39.389000 audit: BPF prog-id=76 op=LOAD Jun 12 23:02:39.389000 audit[3644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=160889324258 a2=98 a3=0 items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643632623933353834333561383537383665303832393932 Jun 12 23:02:39.390000 audit: BPF prog-id=77 op=LOAD Jun 12 23:02:39.390000 audit[3644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=160889323f98 a2=98 a3=0 items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643632623933353834333561383537383665303832393932 Jun 12 23:02:39.390000 audit: BPF prog-id=77 op=UNLOAD Jun 12 23:02:39.390000 audit[3644]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643632623933353834333561383537383665303832393932 Jun 12 23:02:39.390000 audit: BPF prog-id=76 op=UNLOAD Jun 12 23:02:39.390000 audit[3644]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643632623933353834333561383537383665303832393932 Jun 12 23:02:39.390000 audit: BPF prog-id=78 op=LOAD Jun 12 23:02:39.390000 audit[3644]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1608893244a8 a2=98 a3=0 items=0 ppid=3631 pid=3644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38643632623933353834333561383537383665303832393932 Jun 12 23:02:39.404350 containerd[2455]: time="2026-06-12T23:02:39.403756373Z" level=info msg="connecting to shim 4a83b5fbc8f75de051a53a546a07766aef59c339a87ef022f1b68d5f948ebd34" address="unix:///run/containerd/s/a64c69f05b6478719d266718101325d764765b7831172ead920f773b254f2a03" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:39.404794 kernel: eth0: renamed from vethf946df9 Jun 12 23:02:39.406000 audit: BPF prog-id=79 op=LOAD Jun 12 23:02:39.408000 audit: BPF prog-id=80 op=LOAD Jun 12 23:02:39.408000 audit[3695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=e17a25b7f80 a2=98 a3=0 items=0 ppid=3666 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363563626438666532343534363461386330316362356430 Jun 12 23:02:39.408000 audit: BPF prog-id=80 op=UNLOAD Jun 12 23:02:39.408000 audit[3695]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3666 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363563626438666532343534363461386330316362356430 Jun 12 23:02:39.408000 audit: BPF prog-id=81 op=LOAD Jun 12 23:02:39.408000 audit[3695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=e17a25b8258 a2=98 a3=0 items=0 ppid=3666 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363563626438666532343534363461386330316362356430 Jun 12 23:02:39.409000 audit: BPF prog-id=82 op=LOAD Jun 12 23:02:39.409000 audit[3695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=e17a25b7f98 a2=98 a3=0 items=0 ppid=3666 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363563626438666532343534363461386330316362356430 Jun 12 23:02:39.409000 audit: BPF prog-id=82 op=UNLOAD Jun 12 23:02:39.409000 audit[3695]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3666 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363563626438666532343534363461386330316362356430 Jun 12 23:02:39.409000 audit: BPF prog-id=81 op=UNLOAD Jun 12 23:02:39.409000 audit[3695]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3666 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363563626438666532343534363461386330316362356430 Jun 12 23:02:39.409000 audit: BPF prog-id=83 op=LOAD Jun 12 23:02:39.409000 audit[3695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=e17a25b84a8 a2=98 a3=0 items=0 ppid=3666 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33363563626438666532343534363461386330316362356430 Jun 12 23:02:39.422189 kernel: docker0: port 2(veth85d8b16) entered blocking state Jun 12 23:02:39.421939 systemd-networkd[2176]: veth85d8b16: Gained carrier Jun 12 23:02:39.422298 kernel: docker0: port 2(veth85d8b16) entered forwarding state Jun 12 23:02:39.423563 containerd[2455]: time="2026-06-12T23:02:39.423532556Z" level=info msg="connecting to shim 5b67d3ee617aa27776013aeb0f09cd403edf4b3cd431fd93f20922cf334dcf09" address="unix:///run/containerd/s/c644d2b07387c2bb7c444f638b8c74622660d90bb125c43b9678bda647570be0" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:39.424018 containerd[2455]: time="2026-06-12T23:02:39.423998379Z" level=info msg="connecting to shim d339147b87c703ec26a2bd0cf4517a02c34d7fad0f41e5e6e763f1e7b854ffe1" address="unix:///run/containerd/s/130db3ad9d24de3cc13756379bb91d37998ff039d9c182ff9de33fa3b1788fac" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:39.431173 containerd[2455]: time="2026-06-12T23:02:39.426230086Z" level=info msg="connecting to shim f57789cf0185175d81c6b35fa60136978236ac9f4123023dc694b6eadf48deb4" address="unix:///run/containerd/s/6132411210507c35443554e66a1744926d2222a2dbf3ba413574641fc2a09794" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:39.437230 kernel: docker0: port 3(veth5eb14b8) entered blocking state Jun 12 23:02:39.437289 kernel: docker0: port 3(veth5eb14b8) entered disabled state Jun 12 23:02:39.440505 kernel: veth5eb14b8: entered allmulticast mode Jun 12 23:02:39.444009 kernel: veth5eb14b8: entered promiscuous mode Jun 12 23:02:39.425000 audit: ANOM_PROMISCUOUS dev=veth5eb14b8 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.425000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c614e70 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.425000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.454000 audit[3859]: NETFILTER_CFG table=raw:45 family=2 entries=1 op=nft_register_rule pid=3859 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.454000 audit[3859]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcaed56b0 a2=0 a3=0 items=0 ppid=2935 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.454000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.460821 systemd-networkd[2176]: veth5eb14b8: Link UP Jun 12 23:02:39.467018 systemd[1]: Started docker-4a83b5fbc8f75de051a53a546a07766aef59c339a87ef022f1b68d5f948ebd34.scope - libcontainer container 4a83b5fbc8f75de051a53a546a07766aef59c339a87ef022f1b68d5f948ebd34. Jun 12 23:02:39.476134 systemd[1]: Started docker-356f3de4391957e7705eb4caebdc475c812fcad83b02c1473d2432f85fbc98b4.scope - libcontainer container 356f3de4391957e7705eb4caebdc475c812fcad83b02c1473d2432f85fbc98b4. Jun 12 23:02:39.488262 systemd[1]: Started docker-5b67d3ee617aa27776013aeb0f09cd403edf4b3cd431fd93f20922cf334dcf09.scope - libcontainer container 5b67d3ee617aa27776013aeb0f09cd403edf4b3cd431fd93f20922cf334dcf09. Jun 12 23:02:39.493358 systemd[1]: Started docker-f57789cf0185175d81c6b35fa60136978236ac9f4123023dc694b6eadf48deb4.scope - libcontainer container f57789cf0185175d81c6b35fa60136978236ac9f4123023dc694b6eadf48deb4. Jun 12 23:02:39.496795 kernel: eth0: renamed from veth80b387f Jun 12 23:02:39.505221 systemd[1]: Started docker-d339147b87c703ec26a2bd0cf4517a02c34d7fad0f41e5e6e763f1e7b854ffe1.scope - libcontainer container d339147b87c703ec26a2bd0cf4517a02c34d7fad0f41e5e6e763f1e7b854ffe1. Jun 12 23:02:39.512000 audit: BPF prog-id=84 op=LOAD Jun 12 23:02:39.515000 audit: BPF prog-id=85 op=LOAD Jun 12 23:02:39.515000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6dcccc047f80 a2=98 a3=0 items=0 ppid=3781 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613833623566626338663735646530353161353361353436 Jun 12 23:02:39.516000 audit: BPF prog-id=85 op=UNLOAD Jun 12 23:02:39.516000 audit[3794]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3781 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613833623566626338663735646530353161353361353436 Jun 12 23:02:39.516000 audit: BPF prog-id=86 op=LOAD Jun 12 23:02:39.516000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6dcccc048258 a2=98 a3=0 items=0 ppid=3781 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613833623566626338663735646530353161353361353436 Jun 12 23:02:39.516000 audit: BPF prog-id=87 op=LOAD Jun 12 23:02:39.516000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6dcccc047f98 a2=98 a3=0 items=0 ppid=3781 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613833623566626338663735646530353161353361353436 Jun 12 23:02:39.516000 audit: BPF prog-id=87 op=UNLOAD Jun 12 23:02:39.516000 audit[3794]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3781 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613833623566626338663735646530353161353361353436 Jun 12 23:02:39.516000 audit: BPF prog-id=86 op=UNLOAD Jun 12 23:02:39.516000 audit[3794]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3781 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613833623566626338663735646530353161353361353436 Jun 12 23:02:39.516000 audit: BPF prog-id=88 op=LOAD Jun 12 23:02:39.520603 kernel: docker0: port 4(veth08ace5f) entered blocking state Jun 12 23:02:39.520660 kernel: docker0: port 4(veth08ace5f) entered disabled state Jun 12 23:02:39.516000 audit[3794]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6dcccc0484a8 a2=98 a3=0 items=0 ppid=3781 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34613833623566626338663735646530353161353361353436 Jun 12 23:02:39.529257 kernel: veth08ace5f: entered allmulticast mode Jun 12 23:02:39.499000 audit: ANOM_PROMISCUOUS dev=veth08ace5f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.545798 kernel: veth08ace5f: entered promiscuous mode Jun 12 23:02:39.499000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c615350 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.499000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.558773 kernel: docker0: port 3(veth5eb14b8) entered blocking state Jun 12 23:02:39.550000 audit[3931]: NETFILTER_CFG table=raw:46 family=2 entries=1 op=nft_register_rule pid=3931 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.550000 audit[3931]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff4376bd0 a2=0 a3=0 items=0 ppid=2935 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.550000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E350000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.559398 kernel: docker0: port 3(veth5eb14b8) entered forwarding state Jun 12 23:02:39.559119 systemd-networkd[2176]: veth5eb14b8: Gained carrier Jun 12 23:02:39.560020 systemd-networkd[2176]: veth08ace5f: Link UP Jun 12 23:02:39.562000 audit: BPF prog-id=89 op=LOAD Jun 12 23:02:39.562000 audit: BPF prog-id=90 op=LOAD Jun 12 23:02:39.562000 audit[3747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=3bfcc0df80 a2=98 a3=0 items=0 ppid=3720 pid=3747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33353666336465343339313935376537373035656234636165 Jun 12 23:02:39.563000 audit: BPF prog-id=90 op=UNLOAD Jun 12 23:02:39.563000 audit[3747]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3720 pid=3747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.563000 audit: BPF prog-id=91 op=LOAD Jun 12 23:02:39.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33353666336465343339313935376537373035656234636165 Jun 12 23:02:39.563000 audit: BPF prog-id=92 op=LOAD Jun 12 23:02:39.563000 audit[3747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=3bfcc0e258 a2=98 a3=0 items=0 ppid=3720 pid=3747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.564000 audit: BPF prog-id=93 op=LOAD Jun 12 23:02:39.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33353666336465343339313935376537373035656234636165 Jun 12 23:02:39.564000 audit[3858]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=33313b167f80 a2=98 a3=0 items=0 ppid=3817 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353737383963663031383531373564383163366233356661 Jun 12 23:02:39.566000 audit: BPF prog-id=93 op=UNLOAD Jun 12 23:02:39.566000 audit[3858]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3817 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353737383963663031383531373564383163366233356661 Jun 12 23:02:39.566000 audit: BPF prog-id=95 op=LOAD Jun 12 23:02:39.566000 audit: BPF prog-id=94 op=LOAD Jun 12 23:02:39.566000 audit[3747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=3bfcc0df98 a2=98 a3=0 items=0 ppid=3720 pid=3747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33353666336465343339313935376537373035656234636165 Jun 12 23:02:39.566000 audit: BPF prog-id=94 op=UNLOAD Jun 12 23:02:39.566000 audit[3747]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=3720 pid=3747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.566000 audit[3858]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=33313b168258 a2=98 a3=0 items=0 ppid=3817 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33353666336465343339313935376537373035656234636165 Jun 12 23:02:39.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353737383963663031383531373564383163366233356661 Jun 12 23:02:39.566000 audit: BPF prog-id=92 op=UNLOAD Jun 12 23:02:39.566000 audit[3747]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3720 pid=3747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.566000 audit: BPF prog-id=96 op=LOAD Jun 12 23:02:39.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33353666336465343339313935376537373035656234636165 Jun 12 23:02:39.566000 audit[3858]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=33313b167f98 a2=98 a3=0 items=0 ppid=3817 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353737383963663031383531373564383163366233356661 Jun 12 23:02:39.566000 audit: BPF prog-id=96 op=UNLOAD Jun 12 23:02:39.566000 audit[3858]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3817 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353737383963663031383531373564383163366233356661 Jun 12 23:02:39.566000 audit: BPF prog-id=95 op=UNLOAD Jun 12 23:02:39.566000 audit[3858]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3817 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353737383963663031383531373564383163366233356661 Jun 12 23:02:39.566000 audit: BPF prog-id=97 op=LOAD Jun 12 23:02:39.566000 audit[3747]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=3bfcc0e4a8 a2=98 a3=0 items=0 ppid=3720 pid=3747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.566000 audit: BPF prog-id=98 op=LOAD Jun 12 23:02:39.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33353666336465343339313935376537373035656234636165 Jun 12 23:02:39.566000 audit[3858]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=33313b1684a8 a2=98 a3=0 items=0 ppid=3817 pid=3858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66353737383963663031383531373564383163366233356661 Jun 12 23:02:39.567000 audit: BPF prog-id=99 op=LOAD Jun 12 23:02:39.568000 audit: BPF prog-id=100 op=LOAD Jun 12 23:02:39.568000 audit[3819]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2ecb18137f80 a2=98 a3=0 items=0 ppid=3752 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35623637643365653631376161323737373630313361656230 Jun 12 23:02:39.568000 audit: BPF prog-id=100 op=UNLOAD Jun 12 23:02:39.568000 audit[3819]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3752 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35623637643365653631376161323737373630313361656230 Jun 12 23:02:39.569000 audit: BPF prog-id=101 op=LOAD Jun 12 23:02:39.569000 audit: BPF prog-id=102 op=LOAD Jun 12 23:02:39.569000 audit[3819]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2ecb18138258 a2=98 a3=0 items=0 ppid=3752 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35623637643365653631376161323737373630313361656230 Jun 12 23:02:39.569000 audit: BPF prog-id=103 op=LOAD Jun 12 23:02:39.569000 audit[3819]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2ecb18137f98 a2=98 a3=0 items=0 ppid=3752 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35623637643365653631376161323737373630313361656230 Jun 12 23:02:39.569000 audit: BPF prog-id=103 op=UNLOAD Jun 12 23:02:39.569000 audit[3819]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3752 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35623637643365653631376161323737373630313361656230 Jun 12 23:02:39.569000 audit: BPF prog-id=102 op=UNLOAD Jun 12 23:02:39.569000 audit[3819]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3752 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35623637643365653631376161323737373630313361656230 Jun 12 23:02:39.570000 audit: BPF prog-id=104 op=LOAD Jun 12 23:02:39.570000 audit[3836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=32d2ea615f80 a2=98 a3=0 items=0 ppid=3775 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333339313437623837633730336563323661326264306366 Jun 12 23:02:39.571000 audit: BPF prog-id=104 op=UNLOAD Jun 12 23:02:39.571000 audit[3836]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3775 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333339313437623837633730336563323661326264306366 Jun 12 23:02:39.569000 audit: BPF prog-id=105 op=LOAD Jun 12 23:02:39.571000 audit: BPF prog-id=106 op=LOAD Jun 12 23:02:39.571000 audit[3836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=32d2ea616258 a2=98 a3=0 items=0 ppid=3775 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333339313437623837633730336563323661326264306366 Jun 12 23:02:39.571000 audit: BPF prog-id=107 op=LOAD Jun 12 23:02:39.571000 audit[3836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=32d2ea615f98 a2=98 a3=0 items=0 ppid=3775 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333339313437623837633730336563323661326264306366 Jun 12 23:02:39.571000 audit: BPF prog-id=107 op=UNLOAD Jun 12 23:02:39.571000 audit[3836]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=3775 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333339313437623837633730336563323661326264306366 Jun 12 23:02:39.571000 audit: BPF prog-id=106 op=UNLOAD Jun 12 23:02:39.571000 audit[3836]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3775 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333339313437623837633730336563323661326264306366 Jun 12 23:02:39.571000 audit: BPF prog-id=108 op=LOAD Jun 12 23:02:39.571000 audit[3836]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=32d2ea6164a8 a2=98 a3=0 items=0 ppid=3775 pid=3836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64333339313437623837633730336563323661326264306366 Jun 12 23:02:39.569000 audit[3819]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2ecb181384a8 a2=98 a3=0 items=0 ppid=3752 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35623637643365653631376161323737373630313361656230 Jun 12 23:02:39.590948 kernel: eth0: renamed from veth9bd57a7 Jun 12 23:02:39.613132 kernel: docker0: port 5(veth102bff8) entered blocking state Jun 12 23:02:39.613225 kernel: docker0: port 5(veth102bff8) entered disabled state Jun 12 23:02:39.616347 kernel: veth102bff8: entered allmulticast mode Jun 12 23:02:39.619537 kernel: veth102bff8: entered promiscuous mode Jun 12 23:02:39.595000 audit: ANOM_PROMISCUOUS dev=veth102bff8 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.595000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c615770 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.595000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.628795 kernel: docker0: port 4(veth08ace5f) entered blocking state Jun 12 23:02:39.628860 kernel: docker0: port 4(veth08ace5f) entered forwarding state Jun 12 23:02:39.629214 systemd-networkd[2176]: veth08ace5f: Gained carrier Jun 12 23:02:39.630000 audit[3943]: NETFILTER_CFG table=raw:47 family=2 entries=1 op=nft_register_rule pid=3943 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.630000 audit[3943]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd21eea50 a2=0 a3=0 items=0 ppid=2935 pid=3943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.630000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E360000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.632200 systemd-networkd[2176]: veth102bff8: Link UP Jun 12 23:02:39.664322 kernel: docker0: port 6(veth2b7dea3) entered blocking state Jun 12 23:02:39.664395 kernel: docker0: port 6(veth2b7dea3) entered disabled state Jun 12 23:02:39.667123 kernel: veth2b7dea3: entered allmulticast mode Jun 12 23:02:39.670144 kernel: veth2b7dea3: entered promiscuous mode Jun 12 23:02:39.656000 audit: ANOM_PROMISCUOUS dev=veth2b7dea3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.656000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c615ec0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.656000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.678795 kernel: eth0: renamed from veth19d087c Jun 12 23:02:39.683000 audit[3952]: NETFILTER_CFG table=raw:48 family=2 entries=1 op=nft_register_rule pid=3952 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.683000 audit[3952]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffe50a1a0 a2=0 a3=0 items=0 ppid=2935 pid=3952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.683000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E370000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.686333 kernel: docker0: port 5(veth102bff8) entered blocking state Jun 12 23:02:39.686354 kernel: docker0: port 5(veth102bff8) entered forwarding state Jun 12 23:02:39.688891 systemd-networkd[2176]: veth102bff8: Gained carrier Jun 12 23:02:39.689376 systemd-networkd[2176]: veth2b7dea3: Link UP Jun 12 23:02:39.707984 systemd[1]: docker-7006cadda8677fd45a7c80aa5adfab5371a7bdb831026a1c01de3baf10dd672b.scope: Deactivated successfully. Jun 12 23:02:39.724083 kernel: docker0: port 7(vethb4a4866) entered blocking state Jun 12 23:02:39.724161 kernel: docker0: port 7(vethb4a4866) entered disabled state Jun 12 23:02:39.727054 kernel: vethb4a4866: entered allmulticast mode Jun 12 23:02:39.732357 kernel: vethb4a4866: entered promiscuous mode Jun 12 23:02:39.715000 audit: ANOM_PROMISCUOUS dev=vethb4a4866 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.715000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b482930 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.715000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.737948 systemd[1]: docker-7ae678718ca06a1f9238e5513a5856a50815d1b3a532b9d3e78460c7408f59e0.scope: Deactivated successfully. Jun 12 23:02:39.739404 containerd[2455]: time="2026-06-12T23:02:39.737606510Z" level=info msg="shim disconnected" id=7006cadda8677fd45a7c80aa5adfab5371a7bdb831026a1c01de3baf10dd672b namespace=moby Jun 12 23:02:39.739404 containerd[2455]: time="2026-06-12T23:02:39.737634748Z" level=info msg="cleaning up after shim disconnected" id=7006cadda8677fd45a7c80aa5adfab5371a7bdb831026a1c01de3baf10dd672b namespace=moby Jun 12 23:02:39.739404 containerd[2455]: time="2026-06-12T23:02:39.737640428Z" level=info msg="cleaning up dead shim" id=7006cadda8677fd45a7c80aa5adfab5371a7bdb831026a1c01de3baf10dd672b namespace=moby Jun 12 23:02:39.739000 audit[3963]: NETFILTER_CFG table=raw:49 family=2 entries=1 op=nft_register_rule pid=3963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.739000 audit[3963]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffdf631d0 a2=0 a3=0 items=0 ppid=2935 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.739000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E380000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.740290 systemd-networkd[2176]: vethb4a4866: Link UP Jun 12 23:02:39.742905 kernel: eth0: renamed from veth8b67ca0 Jun 12 23:02:39.742953 kernel: docker0: port 6(veth2b7dea3) entered blocking state Jun 12 23:02:39.747788 kernel: docker0: port 6(veth2b7dea3) entered forwarding state Jun 12 23:02:39.747964 systemd-networkd[2176]: veth2b7dea3: Gained carrier Jun 12 23:02:39.764018 kernel: docker0: port 8(vethf60a7aa) entered blocking state Jun 12 23:02:39.764064 kernel: docker0: port 8(vethf60a7aa) entered disabled state Jun 12 23:02:39.770245 kernel: vethf60a7aa: entered allmulticast mode Jun 12 23:02:39.773372 kernel: vethf60a7aa: entered promiscuous mode Jun 12 23:02:39.755000 audit: ANOM_PROMISCUOUS dev=vethf60a7aa prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.755000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b482e70 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.755000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.777836 kernel: eth0: renamed from vethf96e21d Jun 12 23:02:39.781542 dockerd[2935]: time="2026-06-12T23:02:39.781258404Z" level=info msg="ignoring event" container=7ae678718ca06a1f9238e5513a5856a50815d1b3a532b9d3e78460c7408f59e0 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:39.782052 containerd[2455]: time="2026-06-12T23:02:39.781900370Z" level=info msg="shim disconnected" id=7ae678718ca06a1f9238e5513a5856a50815d1b3a532b9d3e78460c7408f59e0 namespace=moby Jun 12 23:02:39.782052 containerd[2455]: time="2026-06-12T23:02:39.781925657Z" level=info msg="cleaning up after shim disconnected" id=7ae678718ca06a1f9238e5513a5856a50815d1b3a532b9d3e78460c7408f59e0 namespace=moby Jun 12 23:02:39.782052 containerd[2455]: time="2026-06-12T23:02:39.781931384Z" level=info msg="cleaning up dead shim" id=7ae678718ca06a1f9238e5513a5856a50815d1b3a532b9d3e78460c7408f59e0 namespace=moby Jun 12 23:02:39.785693 kernel: docker0: port 7(vethb4a4866) entered blocking state Jun 12 23:02:39.785750 kernel: docker0: port 7(vethb4a4866) entered forwarding state Jun 12 23:02:39.785941 systemd-networkd[2176]: vethb4a4866: Gained carrier Jun 12 23:02:39.788000 audit[3997]: NETFILTER_CFG table=raw:50 family=2 entries=1 op=nft_register_rule pid=3997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.788000 audit[3997]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdfc4fff0 a2=0 a3=0 items=0 ppid=2935 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.788000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E390000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.789436 systemd-networkd[2176]: vethf60a7aa: Link UP Jun 12 23:02:39.824748 systemd[1]: docker-57158ea6fd49eee94eb8627435b634d5b1ac80b32251431c9dd98667366dcd46.scope: Deactivated successfully. Jun 12 23:02:39.826249 kernel: docker0: port 9(vethe6a7d0c) entered blocking state Jun 12 23:02:39.826332 kernel: docker0: port 9(vethe6a7d0c) entered disabled state Jun 12 23:02:39.830686 kernel: vethe6a7d0c: entered allmulticast mode Jun 12 23:02:39.834565 kernel: vethe6a7d0c: entered promiscuous mode Jun 12 23:02:39.818000 audit: ANOM_PROMISCUOUS dev=vethe6a7d0c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.818000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b483aa0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.818000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.844000 audit[4031]: NETFILTER_CFG table=raw:51 family=2 entries=1 op=nft_register_rule pid=4031 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.844000 audit[4031]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffdb01980 a2=0 a3=0 items=0 ppid=2935 pid=4031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.844000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E31300000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.845810 kernel: eth0: renamed from vethb03056c Jun 12 23:02:39.850449 kernel: docker0: port 2(veth85d8b16) entered disabled state Jun 12 23:02:39.850003 systemd-networkd[2176]: veth85d8b16: Lost carrier Jun 12 23:02:39.853584 systemd-networkd[2176]: vethe6a7d0c: Link UP Jun 12 23:02:39.858815 kernel: vethf946df9: renamed from eth0 Jun 12 23:02:39.859089 dockerd[2935]: time="2026-06-12T23:02:39.859049309Z" level=info msg="ignoring event" container=57158ea6fd49eee94eb8627435b634d5b1ac80b32251431c9dd98667366dcd46 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:39.860389 containerd[2455]: time="2026-06-12T23:02:39.860246342Z" level=info msg="shim disconnected" id=57158ea6fd49eee94eb8627435b634d5b1ac80b32251431c9dd98667366dcd46 namespace=moby Jun 12 23:02:39.860389 containerd[2455]: time="2026-06-12T23:02:39.860274348Z" level=info msg="cleaning up after shim disconnected" id=57158ea6fd49eee94eb8627435b634d5b1ac80b32251431c9dd98667366dcd46 namespace=moby Jun 12 23:02:39.860389 containerd[2455]: time="2026-06-12T23:02:39.860280108Z" level=info msg="cleaning up dead shim" id=57158ea6fd49eee94eb8627435b634d5b1ac80b32251431c9dd98667366dcd46 namespace=moby Jun 12 23:02:39.867934 kernel: docker0: port 8(vethf60a7aa) entered blocking state Jun 12 23:02:39.867973 kernel: docker0: port 8(vethf60a7aa) entered forwarding state Jun 12 23:02:39.868145 systemd-networkd[2176]: vethf60a7aa: Gained carrier Jun 12 23:02:39.879882 kernel: docker0: port 1(veth9014ded) entered disabled state Jun 12 23:02:39.880072 kernel: veth0158cb1: renamed from eth0 Jun 12 23:02:39.883550 systemd-networkd[2176]: veth9014ded: Lost carrier Jun 12 23:02:39.888988 systemd[1]: docker-8d62b9358435a85786e08299251f6f5d93d1a9b7458cd1ac98192f9969f7ad17.scope: Deactivated successfully. Jun 12 23:02:39.897833 kernel: eth0: renamed from veth58255ce Jun 12 23:02:39.909796 kernel: docker0: port 10(veth80c39f3) entered blocking state Jun 12 23:02:39.909838 kernel: docker0: port 10(veth80c39f3) entered disabled state Jun 12 23:02:39.917337 kernel: veth80c39f3: entered allmulticast mode Jun 12 23:02:39.922091 kernel: veth80c39f3: entered promiscuous mode Jun 12 23:02:39.899000 audit: ANOM_PROMISCUOUS dev=veth80c39f3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.923010 containerd[2455]: time="2026-06-12T23:02:39.922838615Z" level=info msg="shim disconnected" id=8d62b9358435a85786e08299251f6f5d93d1a9b7458cd1ac98192f9969f7ad17 namespace=moby Jun 12 23:02:39.923010 containerd[2455]: time="2026-06-12T23:02:39.922909763Z" level=info msg="cleaning up after shim disconnected" id=8d62b9358435a85786e08299251f6f5d93d1a9b7458cd1ac98192f9969f7ad17 namespace=moby Jun 12 23:02:39.923010 containerd[2455]: time="2026-06-12T23:02:39.922917715Z" level=info msg="cleaning up dead shim" id=8d62b9358435a85786e08299251f6f5d93d1a9b7458cd1ac98192f9969f7ad17 namespace=moby Jun 12 23:02:39.899000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760bd9af90 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.899000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.924000 audit[4057]: NETFILTER_CFG table=raw:52 family=2 entries=1 op=nft_unregister_rule pid=4057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.933602 kernel: docker0: port 9(vethe6a7d0c) entered blocking state Jun 12 23:02:39.933659 kernel: docker0: port 9(vethe6a7d0c) entered forwarding state Jun 12 23:02:39.924000 audit[4057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffeca0fa80 a2=0 a3=0 items=0 ppid=2935 pid=4057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.924000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.935149 dockerd[2935]: time="2026-06-12T23:02:39.935114816Z" level=info msg="ignoring event" container=8d62b9358435a85786e08299251f6f5d93d1a9b7458cd1ac98192f9969f7ad17 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:39.935671 systemd-networkd[2176]: vethe6a7d0c: Gained carrier Jun 12 23:02:39.942000 audit[4068]: NETFILTER_CFG table=raw:53 family=2 entries=1 op=nft_unregister_rule pid=4068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.942000 audit[4068]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe9d4b1a0 a2=0 a3=0 items=0 ppid=2935 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.942000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.944622 systemd-networkd[2176]: veth9014ded: Link DOWN Jun 12 23:02:39.949027 kernel: docker0: port 1(veth9014ded) entered disabled state Jun 12 23:02:39.958888 kernel: veth9014ded (unregistering): left allmulticast mode Jun 12 23:02:39.958925 kernel: veth9014ded (unregistering): left promiscuous mode Jun 12 23:02:39.943000 audit: ANOM_PROMISCUOUS dev=veth9014ded prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:39.962949 kernel: docker0: port 1(veth9014ded) entered disabled state Jun 12 23:02:39.963000 audit[4073]: NETFILTER_CFG table=raw:54 family=2 entries=1 op=nft_register_rule pid=4073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:39.963000 audit[4073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffed8fb3e0 a2=0 a3=0 items=0 ppid=2935 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.963000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E31310000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.969851 kernel: docker0: port 3(veth5eb14b8) entered disabled state Jun 12 23:02:39.970190 systemd-networkd[2176]: veth5eb14b8: Lost carrier Jun 12 23:02:39.943000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb31840 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.943000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:39.976795 kernel: veth80b387f: renamed from eth0 Jun 12 23:02:39.980950 systemd-networkd[2176]: veth85d8b16: Link DOWN Jun 12 23:02:39.986338 systemd[1]: run-docker-netns-8310b04b61c4.mount: Deactivated successfully. Jun 12 23:02:39.989703 kernel: docker0: port 2(veth85d8b16) entered disabled state Jun 12 23:02:39.988981 systemd[1]: docker-4a83b5fbc8f75de051a53a546a07766aef59c339a87ef022f1b68d5f948ebd34.scope: Deactivated successfully. Jun 12 23:02:39.989766 kernel: veth85d8b16 (unregistering): left allmulticast mode Jun 12 23:02:39.998016 kernel: veth85d8b16 (unregistering): left promiscuous mode Jun 12 23:02:39.979000 audit: ANOM_PROMISCUOUS dev=veth85d8b16 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:40.002087 kernel: docker0: port 2(veth85d8b16) entered disabled state Jun 12 23:02:40.008309 systemd[1]: var-lib-docker-overlay2-8f0ebddb9addc15e03d207d108be8429b5bb6fe0a11547af826aac41dc43faf3-merged.mount: Deactivated successfully. Jun 12 23:02:40.010000 audit[4084]: NETFILTER_CFG table=raw:55 family=2 entries=1 op=nft_unregister_rule pid=4084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:40.010000 audit[4084]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc00f7540 a2=0 a3=0 items=0 ppid=2935 pid=4084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.010000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:39.979000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb31940 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:39.979000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:40.017906 systemd-networkd[2176]: veth08ace5f: Lost carrier Jun 12 23:02:40.020698 kernel: docker0: port 4(veth08ace5f) entered disabled state Jun 12 23:02:40.021787 kernel: veth9bd57a7: renamed from eth0 Jun 12 23:02:40.022586 systemd-networkd[2176]: veth80c39f3: Link UP Jun 12 23:02:40.022743 systemd-networkd[2176]: veth5eb14b8: Link DOWN Jun 12 23:02:40.026663 kernel: docker0: port 3(veth5eb14b8) entered disabled state Jun 12 23:02:40.026683 dockerd[2935]: time="2026-06-12T23:02:40.026618903Z" level=info msg="ignoring event" container=4a83b5fbc8f75de051a53a546a07766aef59c339a87ef022f1b68d5f948ebd34 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:40.027340 containerd[2455]: time="2026-06-12T23:02:40.027167739Z" level=info msg="shim disconnected" id=4a83b5fbc8f75de051a53a546a07766aef59c339a87ef022f1b68d5f948ebd34 namespace=moby Jun 12 23:02:40.027435 containerd[2455]: time="2026-06-12T23:02:40.027420549Z" level=info msg="cleaning up after shim disconnected" id=4a83b5fbc8f75de051a53a546a07766aef59c339a87ef022f1b68d5f948ebd34 namespace=moby Jun 12 23:02:40.031294 containerd[2455]: time="2026-06-12T23:02:40.029258300Z" level=info msg="cleaning up dead shim" id=4a83b5fbc8f75de051a53a546a07766aef59c339a87ef022f1b68d5f948ebd34 namespace=moby Jun 12 23:02:40.032213 systemd[1]: docker-f57789cf0185175d81c6b35fa60136978236ac9f4123023dc694b6eadf48deb4.scope: Deactivated successfully. Jun 12 23:02:40.040286 kernel: veth5eb14b8 (unregistering): left allmulticast mode Jun 12 23:02:40.040358 kernel: veth5eb14b8 (unregistering): left promiscuous mode Jun 12 23:02:40.021000 audit: ANOM_PROMISCUOUS dev=veth5eb14b8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:40.041479 systemd[1]: docker-365cbd8fe245464a8c01cb5d02290bea5cefb45a8a12983f8980f0f54fa2b71f.scope: Deactivated successfully. Jun 12 23:02:40.049335 kernel: docker0: port 3(veth5eb14b8) entered disabled state Jun 12 23:02:40.048759 systemd[1]: run-docker-netns-ab71450136eb.mount: Deactivated successfully. Jun 12 23:02:40.021000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bd8b780 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.021000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:40.058000 audit: BPF prog-id=59 op=UNLOAD Jun 12 23:02:40.058000 audit: BPF prog-id=63 op=UNLOAD Jun 12 23:02:40.066556 dockerd[2935]: time="2026-06-12T23:02:40.066522131Z" level=info msg="ignoring event" container=f57789cf0185175d81c6b35fa60136978236ac9f4123023dc694b6eadf48deb4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:40.067360 containerd[2455]: time="2026-06-12T23:02:40.067329896Z" level=info msg="shim disconnected" id=f57789cf0185175d81c6b35fa60136978236ac9f4123023dc694b6eadf48deb4 namespace=moby Jun 12 23:02:40.067482 containerd[2455]: time="2026-06-12T23:02:40.067358423Z" level=info msg="cleaning up after shim disconnected" id=f57789cf0185175d81c6b35fa60136978236ac9f4123023dc694b6eadf48deb4 namespace=moby Jun 12 23:02:40.067482 containerd[2455]: time="2026-06-12T23:02:40.067378598Z" level=info msg="cleaning up dead shim" id=f57789cf0185175d81c6b35fa60136978236ac9f4123023dc694b6eadf48deb4 namespace=moby Jun 12 23:02:40.068482 containerd[2455]: time="2026-06-12T23:02:40.068460965Z" level=info msg="shim disconnected" id=365cbd8fe245464a8c01cb5d02290bea5cefb45a8a12983f8980f0f54fa2b71f namespace=moby Jun 12 23:02:40.068482 containerd[2455]: time="2026-06-12T23:02:40.068477564Z" level=info msg="cleaning up after shim disconnected" id=365cbd8fe245464a8c01cb5d02290bea5cefb45a8a12983f8980f0f54fa2b71f namespace=moby Jun 12 23:02:40.068482 containerd[2455]: time="2026-06-12T23:02:40.068482252Z" level=info msg="cleaning up dead shim" id=365cbd8fe245464a8c01cb5d02290bea5cefb45a8a12983f8980f0f54fa2b71f namespace=moby Jun 12 23:02:40.068748 dockerd[2935]: time="2026-06-12T23:02:40.068671610Z" level=info msg="ignoring event" container=365cbd8fe245464a8c01cb5d02290bea5cefb45a8a12983f8980f0f54fa2b71f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:40.070000 audit: BPF prog-id=64 op=UNLOAD Jun 12 23:02:40.070000 audit: BPF prog-id=68 op=UNLOAD Jun 12 23:02:40.104845 systemd[1]: var-lib-docker-overlay2-2a0b8e4b908a813a679ffcbd98b3fcb36b816d36d286aa864bf82b2f85bf3210-merged.mount: Deactivated successfully. Jun 12 23:02:40.145000 audit: BPF prog-id=69 op=UNLOAD Jun 12 23:02:40.145000 audit: BPF prog-id=73 op=UNLOAD Jun 12 23:02:40.147000 audit[4153]: NETFILTER_CFG table=raw:56 family=2 entries=1 op=nft_unregister_rule pid=4153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:40.147000 audit[4153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc62139b0 a2=0 a3=0 items=0 ppid=2935 pid=4153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.147000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E350000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:40.160521 kernel: veth8b67ca0: renamed from eth0 Jun 12 23:02:40.160344 systemd-networkd[2176]: veth2b7dea3: Lost carrier Jun 12 23:02:40.160684 kernel: docker0: port 6(veth2b7dea3) entered disabled state Jun 12 23:02:40.169361 systemd-networkd[2176]: veth08ace5f: Link DOWN Jun 12 23:02:40.169806 kernel: docker0: port 4(veth08ace5f) entered disabled state Jun 12 23:02:40.178306 kernel: veth08ace5f (unregistering): left allmulticast mode Jun 12 23:02:40.178555 kernel: veth08ace5f (unregistering): left promiscuous mode Jun 12 23:02:40.160000 audit: ANOM_PROMISCUOUS dev=veth08ace5f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:40.179156 kernel: docker0: port 4(veth08ace5f) entered disabled state Jun 12 23:02:40.182655 systemd[1]: docker-d339147b87c703ec26a2bd0cf4517a02c34d7fad0f41e5e6e763f1e7b854ffe1.scope: Deactivated successfully. Jun 12 23:02:40.192801 kernel: docker0: port 5(veth102bff8) entered disabled state Jun 12 23:02:40.192000 audit[4157]: NETFILTER_CFG table=raw:57 family=2 entries=1 op=nft_unregister_rule pid=4157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:40.192000 audit[4157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=392 a0=3 a1=ffffdb3761a0 a2=0 a3=0 items=0 ppid=2935 pid=4157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.192000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E370000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:40.160000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c6c85a0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.160000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:40.196874 systemd-networkd[2176]: veth102bff8: Lost carrier Jun 12 23:02:40.200839 kernel: eth0: renamed from vethf6a612b Jun 12 23:02:40.200891 kernel: veth19d087c: renamed from eth0 Jun 12 23:02:40.204847 kernel: vethf96e21d: renamed from eth0 Jun 12 23:02:40.213801 kernel: docker0: port 7(vethb4a4866) entered disabled state Jun 12 23:02:40.221573 kernel: docker0: port 10(veth80c39f3) entered blocking state Jun 12 23:02:40.221608 kernel: docker0: port 10(veth80c39f3) entered forwarding state Jun 12 23:02:40.223176 systemd[1]: docker-5b67d3ee617aa27776013aeb0f09cd403edf4b3cd431fd93f20922cf334dcf09.scope: Deactivated successfully. Jun 12 23:02:40.231887 kernel: docker0: port 6(veth2b7dea3) entered disabled state Jun 12 23:02:40.240610 kernel: veth2b7dea3 (unregistering): left allmulticast mode Jun 12 23:02:40.226000 audit: ANOM_PROMISCUOUS dev=veth2b7dea3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:40.241768 kernel: veth2b7dea3 (unregistering): left promiscuous mode Jun 12 23:02:40.241817 kernel: docker0: port 6(veth2b7dea3) entered disabled state Jun 12 23:02:40.245150 dockerd[2935]: time="2026-06-12T23:02:40.244905940Z" level=info msg="ignoring event" container=d339147b87c703ec26a2bd0cf4517a02c34d7fad0f41e5e6e763f1e7b854ffe1 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:40.246069 containerd[2455]: time="2026-06-12T23:02:40.245121777Z" level=info msg="shim disconnected" id=d339147b87c703ec26a2bd0cf4517a02c34d7fad0f41e5e6e763f1e7b854ffe1 namespace=moby Jun 12 23:02:40.246069 containerd[2455]: time="2026-06-12T23:02:40.245152015Z" level=info msg="cleaning up after shim disconnected" id=d339147b87c703ec26a2bd0cf4517a02c34d7fad0f41e5e6e763f1e7b854ffe1 namespace=moby Jun 12 23:02:40.246069 containerd[2455]: time="2026-06-12T23:02:40.245160135Z" level=info msg="cleaning up dead shim" id=d339147b87c703ec26a2bd0cf4517a02c34d7fad0f41e5e6e763f1e7b854ffe1 namespace=moby Jun 12 23:02:40.247519 systemd-networkd[2176]: vethb4a4866: Lost carrier Jun 12 23:02:40.247666 systemd-networkd[2176]: veth80c39f3: Gained carrier Jun 12 23:02:40.248022 systemd-networkd[2176]: veth2b7dea3: Link DOWN Jun 12 23:02:40.249000 audit[4174]: NETFILTER_CFG table=raw:58 family=2 entries=1 op=nft_unregister_rule pid=4174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:40.250000 audit: BPF prog-id=74 op=UNLOAD Jun 12 23:02:40.250000 audit: BPF prog-id=78 op=UNLOAD Jun 12 23:02:40.226000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c60e0e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.226000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:40.249000 audit[4174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff06672c0 a2=0 a3=0 items=0 ppid=2935 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.249000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E360000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:40.258766 systemd-networkd[2176]: veth102bff8: Link DOWN Jun 12 23:02:40.264837 kernel: docker0: port 5(veth102bff8) entered disabled state Jun 12 23:02:40.265000 audit[4180]: NETFILTER_CFG table=raw:59 family=2 entries=1 op=nft_unregister_rule pid=4180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:40.265000 audit[4180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdc8ef650 a2=0 a3=0 items=0 ppid=2935 pid=4180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.265000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E380000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:40.268011 containerd[2455]: time="2026-06-12T23:02:40.267975470Z" level=info msg="shim disconnected" id=5b67d3ee617aa27776013aeb0f09cd403edf4b3cd431fd93f20922cf334dcf09 namespace=moby Jun 12 23:02:40.268011 containerd[2455]: time="2026-06-12T23:02:40.268007452Z" level=info msg="cleaning up after shim disconnected" id=5b67d3ee617aa27776013aeb0f09cd403edf4b3cd431fd93f20922cf334dcf09 namespace=moby Jun 12 23:02:40.268011 containerd[2455]: time="2026-06-12T23:02:40.268013820Z" level=info msg="cleaning up dead shim" id=5b67d3ee617aa27776013aeb0f09cd403edf4b3cd431fd93f20922cf334dcf09 namespace=moby Jun 12 23:02:40.268270 dockerd[2935]: time="2026-06-12T23:02:40.268226552Z" level=info msg="ignoring event" container=5b67d3ee617aa27776013aeb0f09cd403edf4b3cd431fd93f20922cf334dcf09 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:40.278308 kernel: veth102bff8 (unregistering): left allmulticast mode Jun 12 23:02:40.278373 kernel: veth102bff8 (unregistering): left promiscuous mode Jun 12 23:02:40.257000 audit: ANOM_PROMISCUOUS dev=veth102bff8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:40.282797 kernel: docker0: port 5(veth102bff8) entered disabled state Jun 12 23:02:40.257000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c6c8440 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.257000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:40.287458 systemd-networkd[2176]: vethb4a4866: Link DOWN Jun 12 23:02:40.295106 kernel: docker0: port 7(vethb4a4866) entered disabled state Jun 12 23:02:40.295161 kernel: vethb4a4866 (unregistering): left allmulticast mode Jun 12 23:02:40.295404 sshd[3401]: Connection closed by 50.85.169.122 port 59386 Jun 12 23:02:40.297012 sshd-session[3351]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:40.286000 audit: ANOM_PROMISCUOUS dev=vethb4a4866 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:40.306949 kernel: vethb4a4866 (unregistering): left promiscuous mode Jun 12 23:02:40.306997 kernel: docker0: port 7(vethb4a4866) entered disabled state Jun 12 23:02:40.306000 audit[3351]: AUDIT1106 pid=3351 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.307000 audit[3351]: AUDIT1104 pid=3351 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10-10.0.0.35:22-50.85.169.122:59386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.312000 audit: BPF prog-id=79 op=UNLOAD Jun 12 23:02:40.312000 audit: BPF prog-id=83 op=UNLOAD Jun 12 23:02:40.286000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c60e360 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.286000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:40.310547 systemd[1]: sshd@13-10-10.0.0.35:22-50.85.169.122:59386.service: Deactivated successfully. Jun 12 23:02:40.312602 systemd[1]: session-19.scope: Deactivated successfully. Jun 12 23:02:40.314751 systemd-logind[2431]: Session 19 logged out. Waiting for processes to exit. Jun 12 23:02:40.315902 systemd-logind[2431]: Removed session 19. Jun 12 23:02:40.324140 sshd[3395]: Connection closed by 50.85.169.122 port 59432 Jun 12 23:02:40.324943 sshd-session[3357]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:40.324000 audit[3357]: AUDIT1106 pid=3357 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.325000 audit[3357]: AUDIT1104 pid=3357 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.327634 systemd[1]: sshd@18-15-10.0.0.35:22-50.85.169.122:59432.service: Deactivated successfully. Jun 12 23:02:40.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-15-10.0.0.35:22-50.85.169.122:59432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.330164 systemd[1]: session-16.scope: Deactivated successfully. Jun 12 23:02:40.331636 systemd-logind[2431]: Session 16 logged out. Waiting for processes to exit. Jun 12 23:02:40.332396 systemd-logind[2431]: Removed session 16. Jun 12 23:02:40.341891 sshd[3381]: Connection closed by 50.85.169.122 port 59380 Jun 12 23:02:40.343287 sshd-session[3348]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:40.343000 audit[3348]: AUDIT1106 pid=3348 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.343000 audit[3348]: AUDIT1104 pid=3348 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.346648 systemd[1]: sshd@10-7-10.0.0.35:22-50.85.169.122:59380.service: Deactivated successfully. Jun 12 23:02:40.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-7-10.0.0.35:22-50.85.169.122:59380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.347000 audit: BPF prog-id=84 op=UNLOAD Jun 12 23:02:40.347000 audit: BPF prog-id=88 op=UNLOAD Jun 12 23:02:40.349504 systemd[1]: session-13.scope: Deactivated successfully. Jun 12 23:02:40.350931 systemd-logind[2431]: Session 13 logged out. Waiting for processes to exit. Jun 12 23:02:40.352339 systemd-logind[2431]: Removed session 13. Jun 12 23:02:40.390758 systemd-networkd[2176]: vethf60a7aa: Lost carrier Jun 12 23:02:40.391662 kernel: docker0: port 8(vethf60a7aa) entered disabled state Jun 12 23:02:40.394799 kernel: vethb03056c: renamed from eth0 Jun 12 23:02:40.408470 sshd[3383]: Connection closed by 50.85.169.122 port 59400 Jun 12 23:02:40.410000 audit[3349]: AUDIT1106 pid=3349 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.410000 audit[3349]: AUDIT1104 pid=3349 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.410297 sshd-session[3349]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:40.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-8-10.0.0.35:22-50.85.169.122:59400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.417000 audit: BPF prog-id=91 op=UNLOAD Jun 12 23:02:40.417000 audit: BPF prog-id=98 op=UNLOAD Jun 12 23:02:40.414525 systemd[1]: sshd@11-8-10.0.0.35:22-50.85.169.122:59400.service: Deactivated successfully. Jun 12 23:02:40.418267 kernel: docker0: port 9(vethe6a7d0c) entered disabled state Jun 12 23:02:40.417716 systemd-networkd[2176]: vethe6a7d0c: Lost carrier Jun 12 23:02:40.418905 systemd[1]: session-14.scope: Deactivated successfully. Jun 12 23:02:40.421796 kernel: veth58255ce: renamed from eth0 Jun 12 23:02:40.422061 systemd-logind[2431]: Session 14 logged out. Waiting for processes to exit. Jun 12 23:02:40.423006 systemd-logind[2431]: Removed session 14. Jun 12 23:02:40.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4101-10.0.0.35:22-50.85.169.122:41836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.449016 systemd[1]: Started sshd@19-4101-10.0.0.35:22-50.85.169.122:41836.service - OpenSSH per-connection server daemon (50.85.169.122:41836). Jun 12 23:02:40.460000 audit[4229]: NETFILTER_CFG table=raw:60 family=2 entries=1 op=nft_unregister_rule pid=4229 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:40.460000 audit[4229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe8782300 a2=0 a3=0 items=0 ppid=2935 pid=4229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.460000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E390000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:40.465345 systemd-networkd[2176]: vethf60a7aa: Link DOWN Jun 12 23:02:40.469843 kernel: docker0: port 8(vethf60a7aa) entered disabled state Jun 12 23:02:40.469000 audit[4232]: NETFILTER_CFG table=raw:61 family=2 entries=1 op=nft_unregister_rule pid=4232 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:40.469000 audit[4232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd7a8b290 a2=0 a3=0 items=0 ppid=2935 pid=4232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.469000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E31300000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:40.477790 kernel: vethf60a7aa (unregistering): left allmulticast mode Jun 12 23:02:40.477842 kernel: vethf60a7aa (unregistering): left promiscuous mode Jun 12 23:02:40.464000 audit: ANOM_PROMISCUOUS dev=vethf60a7aa prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:40.483741 kernel: docker0: port 8(vethf60a7aa) entered disabled state Jun 12 23:02:40.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-16-10.0.0.35:22-50.85.169.122:41848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.484979 systemd[1]: Started sshd@20-16-10.0.0.35:22-50.85.169.122:41848.service - OpenSSH per-connection server daemon (50.85.169.122:41848). Jun 12 23:02:40.464000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c6c9620 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.464000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:40.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-17-10.0.0.35:22-50.85.169.122:41854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.495574 systemd[1]: Started sshd@21-17-10.0.0.35:22-50.85.169.122:41854.service - OpenSSH per-connection server daemon (50.85.169.122:41854). Jun 12 23:02:40.496919 systemd-networkd[2176]: vethe6a7d0c: Link DOWN Jun 12 23:02:40.500939 kernel: docker0: port 9(vethe6a7d0c) entered disabled state Jun 12 23:02:40.508193 kernel: vethe6a7d0c (unregistering): left allmulticast mode Jun 12 23:02:40.508270 kernel: vethe6a7d0c (unregistering): left promiscuous mode Jun 12 23:02:40.494000 audit: ANOM_PROMISCUOUS dev=vethe6a7d0c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:40.494000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c60ef20 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.494000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:40.522000 audit: BPF prog-id=101 op=UNLOAD Jun 12 23:02:40.522000 audit: BPF prog-id=108 op=UNLOAD Jun 12 23:02:40.539288 kernel: docker0: port 9(vethe6a7d0c) entered disabled state Jun 12 23:02:40.543850 systemd[1]: docker-356f3de4391957e7705eb4caebdc475c812fcad83b02c1473d2432f85fbc98b4.scope: Deactivated successfully. Jun 12 23:02:40.556000 audit: BPF prog-id=99 op=UNLOAD Jun 12 23:02:40.556000 audit: BPF prog-id=105 op=UNLOAD Jun 12 23:02:40.558399 containerd[2455]: time="2026-06-12T23:02:40.557003894Z" level=info msg="shim disconnected" id=356f3de4391957e7705eb4caebdc475c812fcad83b02c1473d2432f85fbc98b4 namespace=moby Jun 12 23:02:40.558399 containerd[2455]: time="2026-06-12T23:02:40.557031053Z" level=info msg="cleaning up after shim disconnected" id=356f3de4391957e7705eb4caebdc475c812fcad83b02c1473d2432f85fbc98b4 namespace=moby Jun 12 23:02:40.558399 containerd[2455]: time="2026-06-12T23:02:40.557066699Z" level=info msg="cleaning up dead shim" id=356f3de4391957e7705eb4caebdc475c812fcad83b02c1473d2432f85fbc98b4 namespace=moby Jun 12 23:02:40.569488 sshd[3388]: Connection closed by 50.85.169.122 port 59366 Jun 12 23:02:40.570754 sshd-session[3350]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:40.570000 audit[3350]: AUDIT1106 pid=3350 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.570000 audit[3350]: AUDIT1104 pid=3350 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.573068 systemd[1]: sshd@12-9-10.0.0.35:22-50.85.169.122:59366.service: Deactivated successfully. Jun 12 23:02:40.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-9-10.0.0.35:22-50.85.169.122:59366 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.575282 systemd[1]: session-15.scope: Deactivated successfully. Jun 12 23:02:40.578832 systemd-logind[2431]: Session 15 logged out. Waiting for processes to exit. Jun 12 23:02:40.581206 kernel: vethf6a612b: renamed from eth0 Jun 12 23:02:40.581264 kernel: docker0: port 10(veth80c39f3) entered disabled state Jun 12 23:02:40.583101 systemd-networkd[2176]: veth80c39f3: Lost carrier Jun 12 23:02:40.584971 systemd-logind[2431]: Removed session 15. Jun 12 23:02:40.596000 audit[4269]: NETFILTER_CFG table=raw:62 family=2 entries=1 op=nft_unregister_rule pid=4269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:40.596000 audit[4269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdb0dd5e0 a2=0 a3=0 items=0 ppid=2935 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.596000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E31310000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:40.598871 sshd[3398]: Connection closed by 50.85.169.122 port 59430 Jun 12 23:02:40.598000 audit[3356]: AUDIT1106 pid=3356 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.598000 audit[3356]: AUDIT1104 pid=3356 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.599151 sshd-session[3356]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:40.602220 systemd-networkd[2176]: veth80c39f3: Link DOWN Jun 12 23:02:40.602572 systemd[1]: sshd@17-14-10.0.0.35:22-50.85.169.122:59430.service: Deactivated successfully. Jun 12 23:02:40.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-14-10.0.0.35:22-50.85.169.122:59430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.606684 systemd[1]: session-20.scope: Deactivated successfully. Jun 12 23:02:40.606934 kernel: docker0: port 10(veth80c39f3) entered disabled state Jun 12 23:02:40.607706 systemd-logind[2431]: Session 20 logged out. Waiting for processes to exit. Jun 12 23:02:40.615483 kernel: veth80c39f3 (unregistering): left allmulticast mode Jun 12 23:02:40.615544 kernel: veth80c39f3 (unregistering): left promiscuous mode Jun 12 23:02:40.615757 systemd-logind[2431]: Removed session 20. Jun 12 23:02:40.601000 audit: ANOM_PROMISCUOUS dev=veth80c39f3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:40.619709 kernel: docker0: port 10(veth80c39f3) entered disabled state Jun 12 23:02:40.601000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c6c9e00 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:40.601000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:40.627678 sshd[3402]: Connection closed by 50.85.169.122 port 59388 Jun 12 23:02:40.628015 sshd-session[3353]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:40.627000 audit[3353]: AUDIT1106 pid=3353 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.627000 audit[3353]: AUDIT1104 pid=3353 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.631127 systemd[1]: session-18.scope: Deactivated successfully. Jun 12 23:02:40.632417 systemd[1]: sshd@14-11-10.0.0.35:22-50.85.169.122:59388.service: Deactivated successfully. Jun 12 23:02:40.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-11-10.0.0.35:22-50.85.169.122:59388 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.635112 systemd-logind[2431]: Removed session 18. Jun 12 23:02:40.645000 audit: BPF prog-id=89 op=UNLOAD Jun 12 23:02:40.645000 audit: BPF prog-id=97 op=UNLOAD Jun 12 23:02:40.727543 sshd[3400]: Connection closed by 50.85.169.122 port 59364 Jun 12 23:02:40.728108 sshd-session[3358]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:40.727000 audit[3358]: AUDIT1106 pid=3358 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.728000 audit[3358]: AUDIT1104 pid=3358 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.730765 systemd[1]: sshd@9-6-10.0.0.35:22-50.85.169.122:59364.service: Deactivated successfully. Jun 12 23:02:40.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-6-10.0.0.35:22-50.85.169.122:59364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.733850 systemd[1]: session-22.scope: Deactivated successfully. Jun 12 23:02:40.734169 sshd[3403]: Connection closed by 50.85.169.122 port 59390 Jun 12 23:02:40.734591 sshd-session[3355]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:40.736160 systemd-logind[2431]: Session 22 logged out. Waiting for processes to exit. Jun 12 23:02:40.737414 systemd-logind[2431]: Removed session 22. Jun 12 23:02:40.737000 audit[3355]: AUDIT1106 pid=3355 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.737000 audit[3355]: AUDIT1104 pid=3355 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.740060 systemd[1]: sshd@16-13-10.0.0.35:22-50.85.169.122:59390.service: Deactivated successfully. Jun 12 23:02:40.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-13-10.0.0.35:22-50.85.169.122:59390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.742013 systemd[1]: session-21.scope: Deactivated successfully. Jun 12 23:02:40.743899 systemd-logind[2431]: Session 21 logged out. Waiting for processes to exit. Jun 12 23:02:40.744817 systemd-logind[2431]: Removed session 21. Jun 12 23:02:40.849910 sshd[3396]: Connection closed by 50.85.169.122 port 59350 Jun 12 23:02:40.850482 sshd-session[3354]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:40.850000 audit[3354]: AUDIT1106 pid=3354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.850000 audit[3354]: AUDIT1104 pid=3354 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:40.853598 systemd[1]: sshd@15-12-10.0.0.35:22-50.85.169.122:59350.service: Deactivated successfully. Jun 12 23:02:40.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-12-10.0.0.35:22-50.85.169.122:59350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:40.857350 systemd[1]: session-17.scope: Deactivated successfully. Jun 12 23:02:40.858331 systemd-logind[2431]: Session 17 logged out. Waiting for processes to exit. Jun 12 23:02:40.860127 systemd-logind[2431]: Removed session 17. Jun 12 23:02:40.906488 systemd[1]: run-docker-netns-0a30fc02edf7.mount: Deactivated successfully. Jun 12 23:02:40.906578 systemd[1]: run-docker-netns-fdda327b0289.mount: Deactivated successfully. Jun 12 23:02:40.906607 systemd[1]: run-docker-netns-5e990269cfe7.mount: Deactivated successfully. Jun 12 23:02:40.906634 systemd[1]: run-docker-netns-8637be1f6e03.mount: Deactivated successfully. Jun 12 23:02:40.906659 systemd[1]: run-docker-netns-4b9a480b1201.mount: Deactivated successfully. Jun 12 23:02:40.906683 systemd[1]: run-docker-netns-7ce5443d5805.mount: Deactivated successfully. Jun 12 23:02:40.906708 systemd[1]: run-docker-netns-ee491b7e4438.mount: Deactivated successfully. Jun 12 23:02:40.906735 systemd[1]: run-docker-netns-dd7be2bdf034.mount: Deactivated successfully. Jun 12 23:02:40.906760 systemd[1]: var-lib-docker-overlay2-098ff99912f0c787a4ac96715ac6dfa2c66415c29d6186aaddf30918ff58bd6e-merged.mount: Deactivated successfully. Jun 12 23:02:40.906815 systemd[1]: var-lib-docker-overlay2-ab7ad5efa66178a09014014cabe444ba4709cb2ec05241f60863082532db5547-merged.mount: Deactivated successfully. Jun 12 23:02:40.906842 systemd[1]: var-lib-docker-overlay2-8e402a8bad6000fff42c645a4bffcf55f9c8de805e6cb968e736492c03f35e01-merged.mount: Deactivated successfully. Jun 12 23:02:40.906865 systemd[1]: var-lib-docker-overlay2-7ad03b30d40b0cbc81915ade04f402219acd8266ca07ea110a10e696ec643db9-merged.mount: Deactivated successfully. Jun 12 23:02:40.906890 systemd[1]: var-lib-docker-overlay2-3fcb6aabbe10add8b0658f355f26d1e89103e3674326faa32e0c168f50442c3d-merged.mount: Deactivated successfully. Jun 12 23:02:40.906915 systemd[1]: var-lib-docker-overlay2-ecd9623c188e4bedbbe2fd11f3d3db0040fa5c133ead16a5ac355383406ad48c-merged.mount: Deactivated successfully. Jun 12 23:02:40.906940 systemd[1]: var-lib-docker-overlay2-5373cbcdd8b83c6f9332efbbd29bc509216be41c9f2951afe0e8ec3dd82ec3ed-merged.mount: Deactivated successfully. Jun 12 23:02:40.906964 systemd[1]: var-lib-docker-overlay2-5d19d9d457c25716bafa0e0abdd90e6f7502b7fee55b2508df4c4d0387c15455-merged.mount: Deactivated successfully. Jun 12 23:02:41.239000 audit[4227]: AUDIT1101 pid=4227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.243527 kernel: kauditd_printk_skb: 479 callbacks suppressed Jun 12 23:02:41.243577 kernel: audit: type=1101 audit(1781305361.239:505): pid=4227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.243894 sshd[4227]: Accepted publickey for core from 50.85.169.122 port 41836 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:41.260000 audit[4227]: AUDIT1103 pid=4227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.261792 sshd-session[4227]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:41.276796 sshd[4238]: Accepted publickey for core from 50.85.169.122 port 41854 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:41.277358 sshd-session[4238]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:41.280960 sshd[4234]: Accepted publickey for core from 50.85.169.122 port 41848 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:41.286204 kernel: audit: type=1103 audit(1781305361.260:506): pid=4227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.286272 kernel: audit: type=1006 audit(1781305361.260:507): pid=4227 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jun 12 23:02:41.260000 audit[4227]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc171f390 a2=3 a3=0 items=0 ppid=1 pid=4227 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.287270 sshd-session[4234]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:41.302838 kernel: audit: type=1300 audit(1781305361.260:507): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc171f390 a2=3 a3=0 items=0 ppid=1 pid=4227 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.260000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:41.309676 kernel: audit: type=1327 audit(1781305361.260:507): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:41.265000 audit[4238]: AUDIT1101 pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.326376 kernel: audit: type=1101 audit(1781305361.265:508): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.275000 audit[4238]: AUDIT1103 pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.327045 systemd-networkd[2176]: docker0: Gained IPv6LL Jun 12 23:02:41.327103 systemd-logind[2431]: New session '24' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:41.327754 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:41.343290 kernel: audit: type=1103 audit(1781305361.275:509): pid=4238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.353093 kernel: audit: type=1006 audit(1781305361.275:510): pid=4238 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jun 12 23:02:41.275000 audit[4238]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc6c89960 a2=3 a3=0 items=0 ppid=1 pid=4238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.354069 systemd[1]: Started session-24.scope - Session 24 of User core. Jun 12 23:02:41.370294 kernel: audit: type=1300 audit(1781305361.275:510): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc6c89960 a2=3 a3=0 items=0 ppid=1 pid=4238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.275000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:41.374704 systemd[1]: Started session-23.scope - Session 23 of User core. Jun 12 23:02:41.377437 kernel: audit: type=1327 audit(1781305361.275:510): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:41.377713 systemd-logind[2431]: New session '23' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:41.276000 audit[4234]: AUDIT1101 pid=4234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.285000 audit[4234]: AUDIT1103 pid=4234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.285000 audit[4234]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff36b1270 a2=3 a3=0 items=0 ppid=1 pid=4234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.285000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:41.380611 systemd-logind[2431]: New session '25' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:41.382098 systemd[1]: Started session-25.scope - Session 25 of User core. Jun 12 23:02:41.385000 audit[4238]: AUDIT1105 pid=4238 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.386000 audit[4227]: AUDIT1105 pid=4227 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.387000 audit[4234]: AUDIT1105 pid=4234 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.388000 audit[4293]: AUDIT1103 pid=4293 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.389000 audit[4292]: AUDIT1103 pid=4292 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.389000 audit[4295]: AUDIT1103 pid=4295 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:41.580206 systemd[1]: var-lib-docker-overlay2-38fcf2b9320a2c83dfb4a46ef0f1c7179acae3a1ee8692585aa030b2793c20c4\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:41.608246 systemd[1]: var-lib-docker-overlay2-c2e2eda566806c6d7f8cc449933fa79d23bac8a20f80d987f7495b9ec5fab6e1\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:41.717625 containerd[2455]: time="2026-06-12T23:02:41.717237334Z" level=info msg="connecting to shim 61138a452c304dc844a8c5df4901324194b8e49d24b994ee2a88a67d03df1bb1" address="unix:///run/containerd/s/5806eae763941ab3daac87207144c9a45e67bb04d25929086cf66b85e42263fe" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:41.729560 containerd[2455]: time="2026-06-12T23:02:41.729527445Z" level=info msg="connecting to shim 2bb1acbcc53492bcfc77effdbff64680962a6b10faa9f5e5282289491c993c27" address="unix:///run/containerd/s/1d798ba367cfa388e15fd41bc6afb8ebab9e40ffcfaae97489cd42abca601015" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:41.736998 systemd[1]: Started docker-61138a452c304dc844a8c5df4901324194b8e49d24b994ee2a88a67d03df1bb1.scope - libcontainer container 61138a452c304dc844a8c5df4901324194b8e49d24b994ee2a88a67d03df1bb1. Jun 12 23:02:41.745388 containerd[2455]: time="2026-06-12T23:02:41.743484654Z" level=info msg="connecting to shim 2bc8faf2318c34fd064619e41fbb4d1102ff2ba0f5284c92dd7c1fb0aec8ef2a" address="unix:///run/containerd/s/60b0ad3ea675cc60bece3b1cc8f08e6c092a2c6c78036d5b9574082c5516d4bb" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:41.748000 audit: BPF prog-id=109 op=LOAD Jun 12 23:02:41.749000 audit: BPF prog-id=110 op=LOAD Jun 12 23:02:41.749000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5d9f20fbff80 a2=98 a3=0 items=0 ppid=4327 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313133386134353263333034646338343461386335646634 Jun 12 23:02:41.749000 audit: BPF prog-id=110 op=UNLOAD Jun 12 23:02:41.749000 audit[4338]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4327 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313133386134353263333034646338343461386335646634 Jun 12 23:02:41.750000 audit: BPF prog-id=111 op=LOAD Jun 12 23:02:41.750000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5d9f20fc0258 a2=98 a3=0 items=0 ppid=4327 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313133386134353263333034646338343461386335646634 Jun 12 23:02:41.750000 audit: BPF prog-id=112 op=LOAD Jun 12 23:02:41.750000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=5d9f20fbff98 a2=98 a3=0 items=0 ppid=4327 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313133386134353263333034646338343461386335646634 Jun 12 23:02:41.750000 audit: BPF prog-id=112 op=UNLOAD Jun 12 23:02:41.750000 audit[4338]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4327 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313133386134353263333034646338343461386335646634 Jun 12 23:02:41.750000 audit: BPF prog-id=111 op=UNLOAD Jun 12 23:02:41.750000 audit[4338]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4327 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313133386134353263333034646338343461386335646634 Jun 12 23:02:41.750000 audit: BPF prog-id=113 op=LOAD Jun 12 23:02:41.750000 audit[4338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5d9f20fc04a8 a2=98 a3=0 items=0 ppid=4327 pid=4338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36313133386134353263333034646338343461386335646634 Jun 12 23:02:41.759937 systemd[1]: Started docker-2bb1acbcc53492bcfc77effdbff64680962a6b10faa9f5e5282289491c993c27.scope - libcontainer container 2bb1acbcc53492bcfc77effdbff64680962a6b10faa9f5e5282289491c993c27. Jun 12 23:02:41.762104 systemd[1]: Started docker-2bc8faf2318c34fd064619e41fbb4d1102ff2ba0f5284c92dd7c1fb0aec8ef2a.scope - libcontainer container 2bc8faf2318c34fd064619e41fbb4d1102ff2ba0f5284c92dd7c1fb0aec8ef2a. Jun 12 23:02:41.772000 audit: BPF prog-id=114 op=LOAD Jun 12 23:02:41.773000 audit: BPF prog-id=115 op=LOAD Jun 12 23:02:41.773000 audit[4370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=234483f6ff80 a2=98 a3=0 items=0 ppid=4351 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626231616362636335333439326263666337376566666462 Jun 12 23:02:41.776000 audit: BPF prog-id=115 op=UNLOAD Jun 12 23:02:41.776000 audit[4370]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4351 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626231616362636335333439326263666337376566666462 Jun 12 23:02:41.776000 audit: BPF prog-id=116 op=LOAD Jun 12 23:02:41.776000 audit[4370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=234483f70258 a2=98 a3=0 items=0 ppid=4351 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626231616362636335333439326263666337376566666462 Jun 12 23:02:41.776000 audit: BPF prog-id=117 op=LOAD Jun 12 23:02:41.776000 audit[4370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=234483f6ff98 a2=98 a3=0 items=0 ppid=4351 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626231616362636335333439326263666337376566666462 Jun 12 23:02:41.776000 audit: BPF prog-id=117 op=UNLOAD Jun 12 23:02:41.776000 audit[4370]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4351 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626231616362636335333439326263666337376566666462 Jun 12 23:02:41.777000 audit: BPF prog-id=116 op=UNLOAD Jun 12 23:02:41.777000 audit[4370]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4351 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626231616362636335333439326263666337376566666462 Jun 12 23:02:41.781785 kernel: docker0: port 1(veth6ee1955) entered blocking state Jun 12 23:02:41.777000 audit: BPF prog-id=118 op=LOAD Jun 12 23:02:41.777000 audit[4370]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=234483f704a8 a2=98 a3=0 items=0 ppid=4351 pid=4370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626231616362636335333439326263666337376566666462 Jun 12 23:02:41.782235 kernel: docker0: port 1(veth6ee1955) entered disabled state Jun 12 23:02:41.782256 kernel: veth6ee1955: entered allmulticast mode Jun 12 23:02:41.785596 kernel: veth6ee1955: entered promiscuous mode Jun 12 23:02:41.787000 audit: BPF prog-id=119 op=LOAD Jun 12 23:02:41.773000 audit: ANOM_PROMISCUOUS dev=veth6ee1955 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:41.773000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b2415f0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.773000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:41.789000 audit: BPF prog-id=120 op=LOAD Jun 12 23:02:41.789000 audit[4410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=475b23bbff80 a2=98 a3=0 items=0 ppid=4386 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626338666166323331386333346664303634363139653431 Jun 12 23:02:41.790000 audit: BPF prog-id=120 op=UNLOAD Jun 12 23:02:41.790000 audit[4410]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4386 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626338666166323331386333346664303634363139653431 Jun 12 23:02:41.790000 audit: BPF prog-id=121 op=LOAD Jun 12 23:02:41.790000 audit[4410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=475b23bc0258 a2=98 a3=0 items=0 ppid=4386 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626338666166323331386333346664303634363139653431 Jun 12 23:02:41.790000 audit: BPF prog-id=122 op=LOAD Jun 12 23:02:41.790000 audit[4410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=475b23bbff98 a2=98 a3=0 items=0 ppid=4386 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626338666166323331386333346664303634363139653431 Jun 12 23:02:41.790000 audit: BPF prog-id=122 op=UNLOAD Jun 12 23:02:41.790000 audit[4410]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4386 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626338666166323331386333346664303634363139653431 Jun 12 23:02:41.790000 audit: BPF prog-id=121 op=UNLOAD Jun 12 23:02:41.790000 audit[4410]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4386 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626338666166323331386333346664303634363139653431 Jun 12 23:02:41.790000 audit: BPF prog-id=123 op=LOAD Jun 12 23:02:41.790000 audit[4410]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=475b23bc04a8 a2=98 a3=0 items=0 ppid=4386 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32626338666166323331386333346664303634363139653431 Jun 12 23:02:41.792000 audit[4437]: NETFILTER_CFG table=raw:63 family=2 entries=1 op=nft_register_rule pid=4437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:41.792000 audit[4437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe348d550 a2=0 a3=0 items=0 ppid=2935 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.792000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:41.793807 systemd-networkd[2176]: veth6ee1955: Link UP Jun 12 23:02:41.811798 kernel: eth0: renamed from veth1f75416 Jun 12 23:02:41.819241 kernel: docker0: port 2(veth23989ee) entered blocking state Jun 12 23:02:41.819301 kernel: docker0: port 2(veth23989ee) entered disabled state Jun 12 23:02:41.822059 kernel: veth23989ee: entered allmulticast mode Jun 12 23:02:41.811000 audit: ANOM_PROMISCUOUS dev=veth23989ee prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:41.811000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c6142a0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.811000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:41.827234 kernel: veth23989ee: entered promiscuous mode Jun 12 23:02:41.832000 audit[4442]: NETFILTER_CFG table=raw:64 family=2 entries=1 op=nft_register_rule pid=4442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:41.832000 audit[4442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe23abd10 a2=0 a3=0 items=0 ppid=2935 pid=4442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.832000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:41.837964 kernel: docker0: port 1(veth6ee1955) entered blocking state Jun 12 23:02:41.836019 systemd-networkd[2176]: veth6ee1955: Gained carrier Jun 12 23:02:41.838048 kernel: docker0: port 1(veth6ee1955) entered forwarding state Jun 12 23:02:41.839956 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:41.840549 systemd-networkd[2176]: veth23989ee: Link UP Jun 12 23:02:41.863295 kernel: docker0: port 3(veth59bbef4) entered blocking state Jun 12 23:02:41.866542 kernel: docker0: port 3(veth59bbef4) entered disabled state Jun 12 23:02:41.866572 kernel: veth59bbef4: entered allmulticast mode Jun 12 23:02:41.869792 kernel: veth59bbef4: entered promiscuous mode Jun 12 23:02:41.854000 audit: ANOM_PROMISCUOUS dev=veth59bbef4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:41.854000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c614a50 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.854000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:41.875000 audit[4444]: NETFILTER_CFG table=raw:65 family=2 entries=1 op=nft_register_rule pid=4444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:41.875000 audit[4444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffefa6d000 a2=0 a3=0 items=0 ppid=2935 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:41.875000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:41.883198 systemd-networkd[2176]: veth23989ee: Gained carrier Jun 12 23:02:41.883571 kernel: eth0: renamed from veth35745e8 Jun 12 23:02:41.883589 kernel: docker0: port 2(veth23989ee) entered blocking state Jun 12 23:02:41.883603 kernel: docker0: port 2(veth23989ee) entered forwarding state Jun 12 23:02:41.885965 systemd-networkd[2176]: veth59bbef4: Link UP Jun 12 23:02:41.912801 kernel: eth0: renamed from vethcacc786 Jun 12 23:02:41.920212 kernel: docker0: port 3(veth59bbef4) entered blocking state Jun 12 23:02:41.920285 kernel: docker0: port 3(veth59bbef4) entered forwarding state Jun 12 23:02:41.920250 systemd-networkd[2176]: veth59bbef4: Gained carrier Jun 12 23:02:42.092656 systemd[1]: docker-61138a452c304dc844a8c5df4901324194b8e49d24b994ee2a88a67d03df1bb1.scope: Deactivated successfully. Jun 12 23:02:42.103317 dockerd[2935]: time="2026-06-12T23:02:42.103274944Z" level=info msg="ignoring event" container=61138a452c304dc844a8c5df4901324194b8e49d24b994ee2a88a67d03df1bb1 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:42.104029 containerd[2455]: time="2026-06-12T23:02:42.103871361Z" level=info msg="shim disconnected" id=61138a452c304dc844a8c5df4901324194b8e49d24b994ee2a88a67d03df1bb1 namespace=moby Jun 12 23:02:42.104029 containerd[2455]: time="2026-06-12T23:02:42.103900503Z" level=info msg="cleaning up after shim disconnected" id=61138a452c304dc844a8c5df4901324194b8e49d24b994ee2a88a67d03df1bb1 namespace=moby Jun 12 23:02:42.104029 containerd[2455]: time="2026-06-12T23:02:42.103921734Z" level=info msg="cleaning up dead shim" id=61138a452c304dc844a8c5df4901324194b8e49d24b994ee2a88a67d03df1bb1 namespace=moby Jun 12 23:02:42.123294 systemd-networkd[2176]: veth6ee1955: Lost carrier Jun 12 23:02:42.123873 kernel: docker0: port 1(veth6ee1955) entered disabled state Jun 12 23:02:42.123929 kernel: veth1f75416: renamed from eth0 Jun 12 23:02:42.127461 systemd[1]: docker-2bb1acbcc53492bcfc77effdbff64680962a6b10faa9f5e5282289491c993c27.scope: Deactivated successfully. Jun 12 23:02:42.139000 audit[4495]: NETFILTER_CFG table=raw:66 family=2 entries=1 op=nft_unregister_rule pid=4495 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:42.139000 audit[4495]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe5e9d130 a2=0 a3=0 items=0 ppid=2935 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:42.139000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:42.142249 dockerd[2935]: time="2026-06-12T23:02:42.142149062Z" level=info msg="ignoring event" container=2bb1acbcc53492bcfc77effdbff64680962a6b10faa9f5e5282289491c993c27 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:42.142802 containerd[2455]: time="2026-06-12T23:02:42.142683698Z" level=info msg="shim disconnected" id=2bb1acbcc53492bcfc77effdbff64680962a6b10faa9f5e5282289491c993c27 namespace=moby Jun 12 23:02:42.142802 containerd[2455]: time="2026-06-12T23:02:42.142711745Z" level=info msg="cleaning up after shim disconnected" id=2bb1acbcc53492bcfc77effdbff64680962a6b10faa9f5e5282289491c993c27 namespace=moby Jun 12 23:02:42.142802 containerd[2455]: time="2026-06-12T23:02:42.142734471Z" level=info msg="cleaning up dead shim" id=2bb1acbcc53492bcfc77effdbff64680962a6b10faa9f5e5282289491c993c27 namespace=moby Jun 12 23:02:42.145905 systemd-networkd[2176]: veth6ee1955: Link DOWN Jun 12 23:02:42.149793 kernel: docker0: port 1(veth6ee1955) entered disabled state Jun 12 23:02:42.150044 systemd[1]: docker-2bc8faf2318c34fd064619e41fbb4d1102ff2ba0f5284c92dd7c1fb0aec8ef2a.scope: Deactivated successfully. Jun 12 23:02:42.160959 kernel: veth6ee1955 (unregistering): left allmulticast mode Jun 12 23:02:42.161025 kernel: veth6ee1955 (unregistering): left promiscuous mode Jun 12 23:02:42.144000 audit: ANOM_PROMISCUOUS dev=veth6ee1955 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:42.165464 kernel: docker0: port 1(veth6ee1955) entered disabled state Jun 12 23:02:42.144000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8db720 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:42.144000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:42.172230 dockerd[2935]: time="2026-06-12T23:02:42.172175843Z" level=info msg="ignoring event" container=2bc8faf2318c34fd064619e41fbb4d1102ff2ba0f5284c92dd7c1fb0aec8ef2a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:42.172483 containerd[2455]: time="2026-06-12T23:02:42.172445029Z" level=info msg="shim disconnected" id=2bc8faf2318c34fd064619e41fbb4d1102ff2ba0f5284c92dd7c1fb0aec8ef2a namespace=moby Jun 12 23:02:42.172532 containerd[2455]: time="2026-06-12T23:02:42.172480531Z" level=info msg="cleaning up after shim disconnected" id=2bc8faf2318c34fd064619e41fbb4d1102ff2ba0f5284c92dd7c1fb0aec8ef2a namespace=moby Jun 12 23:02:42.172532 containerd[2455]: time="2026-06-12T23:02:42.172502242Z" level=info msg="cleaning up dead shim" id=2bc8faf2318c34fd064619e41fbb4d1102ff2ba0f5284c92dd7c1fb0aec8ef2a namespace=moby Jun 12 23:02:42.175711 systemd[1]: run-docker-netns-4712b76a4635.mount: Deactivated successfully. Jun 12 23:02:42.181864 systemd[1]: var-lib-docker-overlay2-c2e2eda566806c6d7f8cc449933fa79d23bac8a20f80d987f7495b9ec5fab6e1-merged.mount: Deactivated successfully. Jun 12 23:02:42.187000 audit: BPF prog-id=109 op=UNLOAD Jun 12 23:02:42.187000 audit: BPF prog-id=113 op=UNLOAD Jun 12 23:02:42.195264 systemd-networkd[2176]: veth23989ee: Lost carrier Jun 12 23:02:42.195795 kernel: docker0: port 2(veth23989ee) entered disabled state Jun 12 23:02:42.195863 kernel: veth35745e8: renamed from eth0 Jun 12 23:02:42.209625 systemd-networkd[2176]: veth59bbef4: Lost carrier Jun 12 23:02:42.209804 kernel: docker0: port 3(veth59bbef4) entered disabled state Jun 12 23:02:42.213798 kernel: vethcacc786: renamed from eth0 Jun 12 23:02:42.241000 audit[4533]: NETFILTER_CFG table=raw:67 family=2 entries=1 op=nft_unregister_rule pid=4533 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:42.241000 audit[4533]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffd89e980 a2=0 a3=0 items=0 ppid=2935 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:42.241000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E330000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:42.247335 systemd-networkd[2176]: veth23989ee: Link DOWN Jun 12 23:02:42.251797 kernel: docker0: port 2(veth23989ee) entered disabled state Jun 12 23:02:42.259590 kernel: veth23989ee (unregistering): left allmulticast mode Jun 12 23:02:42.259650 kernel: veth23989ee (unregistering): left promiscuous mode Jun 12 23:02:42.246000 audit: ANOM_PROMISCUOUS dev=veth23989ee prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:42.259000 audit[4535]: NETFILTER_CFG table=raw:68 family=2 entries=1 op=nft_unregister_rule pid=4535 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:42.259000 audit[4535]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff00c2780 a2=0 a3=0 items=0 ppid=2935 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:42.259000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E340000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:42.263736 kernel: docker0: port 2(veth23989ee) entered disabled state Jun 12 23:02:42.246000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb0060 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:42.246000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:42.271150 systemd-networkd[2176]: veth59bbef4: Link DOWN Jun 12 23:02:42.275794 kernel: docker0: port 3(veth59bbef4) entered disabled state Jun 12 23:02:42.282972 systemd[1]: run-docker-netns-c913f8bf9aa0.mount: Deactivated successfully. Jun 12 23:02:42.284909 kernel: veth59bbef4 (unregistering): left allmulticast mode Jun 12 23:02:42.284963 kernel: veth59bbef4 (unregistering): left promiscuous mode Jun 12 23:02:42.270000 audit: ANOM_PROMISCUOUS dev=veth59bbef4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:42.289161 kernel: docker0: port 3(veth59bbef4) entered disabled state Jun 12 23:02:42.293734 systemd[1]: var-lib-docker-overlay2-38fcf2b9320a2c83dfb4a46ef0f1c7179acae3a1ee8692585aa030b2793c20c4-merged.mount: Deactivated successfully. Jun 12 23:02:42.270000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ffa80 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:42.270000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:42.304000 audit: BPF prog-id=114 op=UNLOAD Jun 12 23:02:42.304000 audit: BPF prog-id=118 op=UNLOAD Jun 12 23:02:42.322000 audit: BPF prog-id=119 op=UNLOAD Jun 12 23:02:42.322000 audit: BPF prog-id=123 op=UNLOAD Jun 12 23:02:42.323038 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:42.431909 sshd[4292]: Connection closed by 50.85.169.122 port 41854 Jun 12 23:02:42.433658 sshd-session[4238]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:42.433000 audit[4238]: AUDIT1106 pid=4238 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:42.433000 audit[4238]: AUDIT1104 pid=4238 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:42.436348 systemd[1]: sshd@21-17-10.0.0.35:22-50.85.169.122:41854.service: Deactivated successfully. Jun 12 23:02:42.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-17-10.0.0.35:22-50.85.169.122:41854 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:42.438263 systemd[1]: session-24.scope: Deactivated successfully. Jun 12 23:02:42.439385 systemd-logind[2431]: Session 24 logged out. Waiting for processes to exit. Jun 12 23:02:42.441065 systemd-logind[2431]: Removed session 24. Jun 12 23:02:42.518812 sshd[4295]: Connection closed by 50.85.169.122 port 41848 Jun 12 23:02:42.520420 sshd[4293]: Connection closed by 50.85.169.122 port 41836 Jun 12 23:02:42.520709 sshd-session[4234]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:42.520932 sshd-session[4227]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:42.520000 audit[4227]: AUDIT1106 pid=4227 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:42.520000 audit[4227]: AUDIT1104 pid=4227 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:42.520000 audit[4234]: AUDIT1106 pid=4234 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:42.520000 audit[4234]: AUDIT1104 pid=4234 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:42.523507 systemd[1]: sshd@20-16-10.0.0.35:22-50.85.169.122:41848.service: Deactivated successfully. Jun 12 23:02:42.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-16-10.0.0.35:22-50.85.169.122:41848 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:42.525494 systemd[1]: sshd@19-4101-10.0.0.35:22-50.85.169.122:41836.service: Deactivated successfully. Jun 12 23:02:42.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4101-10.0.0.35:22-50.85.169.122:41836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:42.527289 systemd[1]: session-23.scope: Deactivated successfully. Jun 12 23:02:42.528123 systemd[1]: session-25.scope: Deactivated successfully. Jun 12 23:02:42.529863 systemd-logind[2431]: Session 25 logged out. Waiting for processes to exit. Jun 12 23:02:42.531314 systemd-logind[2431]: Removed session 25. Jun 12 23:02:42.532065 systemd-logind[2431]: Session 23 logged out. Waiting for processes to exit. Jun 12 23:02:42.532796 systemd-logind[2431]: Removed session 23. Jun 12 23:02:42.671040 systemd[1]: Started sshd@22-18-10.0.0.35:22-50.85.169.122:41856.service - OpenSSH per-connection server daemon (50.85.169.122:41856). Jun 12 23:02:42.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-18-10.0.0.35:22-50.85.169.122:41856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:42.906484 systemd[1]: run-docker-netns-44daf522a2ac.mount: Deactivated successfully. Jun 12 23:02:42.906576 systemd[1]: var-lib-docker-overlay2-a6592c848b9ded4eaee189427b7270322fde500b14be84114cb6f29f7d807288-merged.mount: Deactivated successfully. Jun 12 23:02:43.418000 audit[4546]: AUDIT1101 pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:43.419442 sshd[4546]: Accepted publickey for core from 50.85.169.122 port 41856 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:43.419000 audit[4546]: AUDIT1103 pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:43.419000 audit[4546]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd7117f70 a2=3 a3=0 items=0 ppid=1 pid=4546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:43.419000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:43.420384 sshd-session[4546]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:43.424199 systemd-logind[2431]: New session '26' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:43.428082 systemd[1]: Started session-26.scope - Session 26 of User core. Jun 12 23:02:43.429000 audit[4546]: AUDIT1105 pid=4546 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:43.431000 audit[4550]: AUDIT1103 pid=4550 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:43.710000 audit[4555]: AUDIT1101 pid=4555 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.710000 audit[4555]: AUDIT1110 pid=4555 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.710000 audit[4555]: AUDIT1105 pid=4555 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.711273 sudo[4555]: core : PWD=/tmp/tmp.TekArKFxgu ; USER=root ; COMMAND=/usr/sbin/ldd /usr/bin/sh /usr/bin/ping Jun 12 23:02:43.711487 sudo[4555]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:02:43.731000 audit[4555]: AUDIT1106 pid=4555 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.732076 sudo[4555]: pam_unix(sudo:session): session closed for user root Jun 12 23:02:43.731000 audit[4555]: AUDIT1104 pid=4555 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.736000 audit[4568]: AUDIT1101 pid=4568 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.737401 sudo[4568]: core : PWD=/tmp/tmp.TekArKFxgu ; USER=root ; COMMAND=/usr/sbin/rsync -av --relative --copy-links /usr/bin/sh /usr/bin/ping /lib/ld-linux-aarch64.so.1 /lib64/ld-linux-aarch64.so.1 /lib64/libc.so.6 /lib64/libcap.so.2 /lib64/libreadline.so.8 /lib64/libtinfo.so.6 /lib64/libtinfow.so.6 ./ Jun 12 23:02:43.736000 audit[4568]: AUDIT1110 pid=4568 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.738043 sudo[4568]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:02:43.737000 audit[4568]: AUDIT1105 pid=4568 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.788872 sudo[4568]: pam_unix(sudo:session): session closed for user root Jun 12 23:02:43.788000 audit[4568]: AUDIT1106 pid=4568 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.788000 audit[4568]: AUDIT1104 pid=4568 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.792000 audit[4551]: AUDIT1101 pid=4551 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.793718 sudo[4551]: core : PWD=/tmp/tmp.TekArKFxgu ; USER=root ; COMMAND=/usr/sbin/docker build -t ping . Jun 12 23:02:43.793000 audit[4551]: AUDIT1110 pid=4551 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.793000 audit[4551]: AUDIT1105 pid=4551 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:43.793945 sudo[4551]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:02:43.867838 dockerd[2935]: 2026/06/12 23:02:43 http2: server: error reading preface from client @: read unix /run/docker.sock->@: read: connection reset by peer Jun 12 23:02:43.939767 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount2855594314.mount: Deactivated successfully. Jun 12 23:02:44.083918 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount3330692202.mount: Deactivated successfully. Jun 12 23:02:44.276242 sudo[4551]: pam_unix(sudo:session): session closed for user root Jun 12 23:02:44.275000 audit[4551]: AUDIT1106 pid=4551 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:44.275000 audit[4551]: AUDIT1104 pid=4551 uid=500 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:02:44.419356 sshd[4550]: Connection closed by 50.85.169.122 port 41856 Jun 12 23:02:44.418000 audit[4546]: AUDIT1106 pid=4546 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:44.418000 audit[4546]: AUDIT1104 pid=4546 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:44.418985 sshd-session[4546]: pam_unix(sshd:session): session closed for user core Jun 12 23:02:44.422361 systemd[1]: sshd@22-18-10.0.0.35:22-50.85.169.122:41856.service: Deactivated successfully. Jun 12 23:02:44.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-18-10.0.0.35:22-50.85.169.122:41856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:44.423775 systemd[1]: session-26.scope: Deactivated successfully. Jun 12 23:02:44.424447 systemd-logind[2431]: Session 26 logged out. Waiting for processes to exit. Jun 12 23:02:44.425579 systemd-logind[2431]: Removed session 26. Jun 12 23:02:44.571205 systemd[1]: Started sshd@23-4102-10.0.0.35:22-50.85.169.122:41870.service - OpenSSH per-connection server daemon (50.85.169.122:41870). Jun 12 23:02:44.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4102-10.0.0.35:22-50.85.169.122:41870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:02:45.315000 audit[4611]: AUDIT1101 pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:45.316791 sshd[4611]: Accepted publickey for core from 50.85.169.122 port 41870 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:02:45.316000 audit[4611]: AUDIT1103 pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:45.316000 audit[4611]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc9046dd0 a2=3 a3=0 items=0 ppid=1 pid=4611 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:45.316000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:02:45.317903 sshd-session[4611]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:02:45.321991 systemd-logind[2431]: New session '27' of user 'core' with class 'user' and type 'tty'. Jun 12 23:02:45.327909 systemd[1]: Started session-27.scope - Session 27 of User core. Jun 12 23:02:45.329000 audit[4611]: AUDIT1105 pid=4611 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:45.330000 audit[4615]: AUDIT1103 pid=4615 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:02:45.646189 systemd[1]: var-lib-docker-overlay2-bdf1ae6a4f16792516d6503e9e0eaea8198ce2c1a29b2dd0384b91a305914f10\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:45.799918 containerd[2455]: time="2026-06-12T23:02:45.799864969Z" level=info msg="connecting to shim b3099018a1d9dee8cf94bfc20a9aa80a6975e8f57333dec1ed4afa1fef4bd8df" address="unix:///run/containerd/s/4e1435e156f806d8b35c5b394602dec0fcd41e97a29d5343aa8cbebeafb4953d" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:45.820942 systemd[1]: Started docker-b3099018a1d9dee8cf94bfc20a9aa80a6975e8f57333dec1ed4afa1fef4bd8df.scope - libcontainer container b3099018a1d9dee8cf94bfc20a9aa80a6975e8f57333dec1ed4afa1fef4bd8df. Jun 12 23:02:45.827000 audit: BPF prog-id=124 op=LOAD Jun 12 23:02:45.827000 audit: BPF prog-id=125 op=LOAD Jun 12 23:02:45.827000 audit[4646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6247bd171f80 a2=98 a3=0 items=0 ppid=4635 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:45.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62333039393031386131643964656538636639346266633230 Jun 12 23:02:45.828000 audit: BPF prog-id=125 op=UNLOAD Jun 12 23:02:45.828000 audit[4646]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4635 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:45.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62333039393031386131643964656538636639346266633230 Jun 12 23:02:45.828000 audit: BPF prog-id=126 op=LOAD Jun 12 23:02:45.828000 audit[4646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6247bd172258 a2=98 a3=0 items=0 ppid=4635 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:45.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62333039393031386131643964656538636639346266633230 Jun 12 23:02:45.828000 audit: BPF prog-id=127 op=LOAD Jun 12 23:02:45.828000 audit[4646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6247bd171f98 a2=98 a3=0 items=0 ppid=4635 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:45.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62333039393031386131643964656538636639346266633230 Jun 12 23:02:45.828000 audit: BPF prog-id=127 op=UNLOAD Jun 12 23:02:45.828000 audit[4646]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4635 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:45.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62333039393031386131643964656538636639346266633230 Jun 12 23:02:45.828000 audit: BPF prog-id=126 op=UNLOAD Jun 12 23:02:45.828000 audit[4646]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4635 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:45.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62333039393031386131643964656538636639346266633230 Jun 12 23:02:45.828000 audit: BPF prog-id=128 op=LOAD Jun 12 23:02:45.828000 audit[4646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6247bd1724a8 a2=98 a3=0 items=0 ppid=4635 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:45.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62333039393031386131643964656538636639346266633230 Jun 12 23:02:45.850860 kernel: docker0: port 1(vethc1d4ba0) entered blocking state Jun 12 23:02:45.850934 kernel: docker0: port 1(vethc1d4ba0) entered disabled state Jun 12 23:02:45.853850 kernel: vethc1d4ba0: entered allmulticast mode Jun 12 23:02:45.856818 kernel: vethc1d4ba0: entered promiscuous mode Jun 12 23:02:45.842000 audit: ANOM_PROMISCUOUS dev=vethc1d4ba0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:45.842000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b945170 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:45.842000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:45.858000 audit[4669]: NETFILTER_CFG table=raw:69 family=2 entries=1 op=nft_register_rule pid=4669 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:45.858000 audit[4669]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd011bab0 a2=0 a3=0 items=0 ppid=2935 pid=4669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:45.858000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:45.859739 systemd-networkd[2176]: vethc1d4ba0: Link UP Jun 12 23:02:45.882938 kernel: eth0: renamed from vethdcfe445 Jun 12 23:02:45.883005 kernel: docker0: port 1(vethc1d4ba0) entered blocking state Jun 12 23:02:45.883021 kernel: docker0: port 1(vethc1d4ba0) entered forwarding state Jun 12 23:02:45.883212 systemd-networkd[2176]: vethc1d4ba0: Gained carrier Jun 12 23:02:45.883401 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:46.908421 systemd[1]: docker-b3099018a1d9dee8cf94bfc20a9aa80a6975e8f57333dec1ed4afa1fef4bd8df.scope: Deactivated successfully. Jun 12 23:02:46.921079 dockerd[2935]: time="2026-06-12T23:02:46.920910660Z" level=info msg="ignoring event" container=b3099018a1d9dee8cf94bfc20a9aa80a6975e8f57333dec1ed4afa1fef4bd8df module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:46.921868 containerd[2455]: time="2026-06-12T23:02:46.921699220Z" level=info msg="shim disconnected" id=b3099018a1d9dee8cf94bfc20a9aa80a6975e8f57333dec1ed4afa1fef4bd8df namespace=moby Jun 12 23:02:46.922299 containerd[2455]: time="2026-06-12T23:02:46.922120190Z" level=info msg="cleaning up after shim disconnected" id=b3099018a1d9dee8cf94bfc20a9aa80a6975e8f57333dec1ed4afa1fef4bd8df namespace=moby Jun 12 23:02:46.922299 containerd[2455]: time="2026-06-12T23:02:46.922153740Z" level=info msg="cleaning up dead shim" id=b3099018a1d9dee8cf94bfc20a9aa80a6975e8f57333dec1ed4afa1fef4bd8df namespace=moby Jun 12 23:02:46.944379 kernel: docker0: port 1(vethc1d4ba0) entered disabled state Jun 12 23:02:46.943889 systemd-networkd[2176]: vethc1d4ba0: Lost carrier Jun 12 23:02:46.947798 kernel: vethdcfe445: renamed from eth0 Jun 12 23:02:46.963000 audit[4702]: NETFILTER_CFG table=raw:70 family=2 entries=1 op=nft_unregister_rule pid=4702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:46.967035 kernel: kauditd_printk_skb: 190 callbacks suppressed Jun 12 23:02:46.967075 kernel: audit: type=1325 audit(1781305366.963:611): table=raw:70 family=2 entries=1 op=nft_unregister_rule pid=4702 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:46.963000 audit[4702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe7e1dfc0 a2=0 a3=0 items=0 ppid=2935 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:46.992841 kernel: audit: type=1300 audit(1781305366.963:611): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe7e1dfc0 a2=0 a3=0 items=0 ppid=2935 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:46.963000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:47.005048 kernel: audit: type=1327 audit(1781305366.963:611): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:47.005963 kernel: docker0: port 1(vethc1d4ba0) entered disabled state Jun 12 23:02:47.006037 systemd-networkd[2176]: vethc1d4ba0: Link DOWN Jun 12 23:02:47.017682 kernel: vethc1d4ba0 (unregistering): left allmulticast mode Jun 12 23:02:47.017736 kernel: vethc1d4ba0 (unregistering): left promiscuous mode Jun 12 23:02:47.004000 audit: ANOM_PROMISCUOUS dev=vethc1d4ba0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:47.025801 kernel: audit: type=1700 audit(1781305367.004:612): dev=vethc1d4ba0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:47.025857 kernel: docker0: port 1(vethc1d4ba0) entered disabled state Jun 12 23:02:47.004000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb31b20 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.004000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:47.074047 kernel: audit: type=1300 audit(1781305367.004:612): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb31b20 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.074125 kernel: audit: type=1327 audit(1781305367.004:612): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:47.075940 systemd[1]: run-docker-netns-267209a941ee.mount: Deactivated successfully. Jun 12 23:02:47.080710 systemd[1]: var-lib-docker-overlay2-bdf1ae6a4f16792516d6503e9e0eaea8198ce2c1a29b2dd0384b91a305914f10-merged.mount: Deactivated successfully. Jun 12 23:02:47.092000 audit: BPF prog-id=124 op=UNLOAD Jun 12 23:02:47.092000 audit: BPF prog-id=128 op=UNLOAD Jun 12 23:02:47.144382 kernel: audit: type=1334 audit(1781305367.092:613): prog-id=124 op=UNLOAD Jun 12 23:02:47.144418 kernel: audit: type=1334 audit(1781305367.092:614): prog-id=128 op=UNLOAD Jun 12 23:02:47.198170 systemd[1]: var-lib-docker-overlay2-49f1bd6fc72f433b399fe0e4437cee304fe361908d823168288357ec3a17a9d5\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:47.276105 containerd[2455]: time="2026-06-12T23:02:47.275916904Z" level=info msg="connecting to shim ad97d351e3779291cb226cf01ec8839c0029662d31004bd5167c6bd5953e181f" address="unix:///run/containerd/s/118f69a20e24603899f11d62aa160e151c6dd7275343d30538640151521d7840" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:47.295984 systemd[1]: Started docker-ad97d351e3779291cb226cf01ec8839c0029662d31004bd5167c6bd5953e181f.scope - libcontainer container ad97d351e3779291cb226cf01ec8839c0029662d31004bd5167c6bd5953e181f. Jun 12 23:02:47.304000 audit: BPF prog-id=129 op=LOAD Jun 12 23:02:47.304000 audit: BPF prog-id=130 op=LOAD Jun 12 23:02:47.314454 kernel: audit: type=1334 audit(1781305367.304:615): prog-id=129 op=LOAD Jun 12 23:02:47.314718 kernel: audit: type=1334 audit(1781305367.304:616): prog-id=130 op=LOAD Jun 12 23:02:47.304000 audit[4731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5e7e99cadf80 a2=98 a3=0 items=0 ppid=4719 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61643937643335316533373739323931636232323663663031 Jun 12 23:02:47.309000 audit: BPF prog-id=130 op=UNLOAD Jun 12 23:02:47.309000 audit[4731]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4719 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61643937643335316533373739323931636232323663663031 Jun 12 23:02:47.309000 audit: BPF prog-id=131 op=LOAD Jun 12 23:02:47.309000 audit[4731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5e7e99cae258 a2=98 a3=0 items=0 ppid=4719 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61643937643335316533373739323931636232323663663031 Jun 12 23:02:47.309000 audit: BPF prog-id=132 op=LOAD Jun 12 23:02:47.309000 audit[4731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=5e7e99cadf98 a2=98 a3=0 items=0 ppid=4719 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61643937643335316533373739323931636232323663663031 Jun 12 23:02:47.309000 audit: BPF prog-id=132 op=UNLOAD Jun 12 23:02:47.309000 audit[4731]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4719 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61643937643335316533373739323931636232323663663031 Jun 12 23:02:47.309000 audit: BPF prog-id=131 op=UNLOAD Jun 12 23:02:47.309000 audit[4731]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4719 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61643937643335316533373739323931636232323663663031 Jun 12 23:02:47.309000 audit: BPF prog-id=133 op=LOAD Jun 12 23:02:47.309000 audit[4731]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5e7e99cae4a8 a2=98 a3=0 items=0 ppid=4719 pid=4731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61643937643335316533373739323931636232323663663031 Jun 12 23:02:47.334830 kernel: docker0: port 1(veth954697e) entered blocking state Jun 12 23:02:47.334900 kernel: docker0: port 1(veth954697e) entered disabled state Jun 12 23:02:47.337689 kernel: veth954697e: entered allmulticast mode Jun 12 23:02:47.340645 kernel: veth954697e: entered promiscuous mode Jun 12 23:02:47.326000 audit: ANOM_PROMISCUOUS dev=veth954697e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:47.326000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52ee70 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.326000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:47.342283 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:47.343000 audit[4752]: NETFILTER_CFG table=raw:71 family=2 entries=1 op=nft_register_rule pid=4752 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:47.343000 audit[4752]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff2fdd610 a2=0 a3=0 items=0 ppid=2935 pid=4752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:47.343000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:47.345281 systemd-networkd[2176]: veth954697e: Link UP Jun 12 23:02:47.371612 kernel: eth0: renamed from vethb3dadc6 Jun 12 23:02:47.371699 kernel: docker0: port 1(veth954697e) entered blocking state Jun 12 23:02:47.371714 kernel: docker0: port 1(veth954697e) entered forwarding state Jun 12 23:02:47.371918 systemd-networkd[2176]: veth954697e: Gained carrier Jun 12 23:02:47.372363 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:48.398689 systemd[1]: docker-ad97d351e3779291cb226cf01ec8839c0029662d31004bd5167c6bd5953e181f.scope: Deactivated successfully. Jun 12 23:02:48.408856 dockerd[2935]: time="2026-06-12T23:02:48.408822091Z" level=info msg="ignoring event" container=ad97d351e3779291cb226cf01ec8839c0029662d31004bd5167c6bd5953e181f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:48.409320 containerd[2455]: time="2026-06-12T23:02:48.409278764Z" level=info msg="shim disconnected" id=ad97d351e3779291cb226cf01ec8839c0029662d31004bd5167c6bd5953e181f namespace=moby Jun 12 23:02:48.409559 containerd[2455]: time="2026-06-12T23:02:48.409309818Z" level=info msg="cleaning up after shim disconnected" id=ad97d351e3779291cb226cf01ec8839c0029662d31004bd5167c6bd5953e181f namespace=moby Jun 12 23:02:48.409559 containerd[2455]: time="2026-06-12T23:02:48.409332769Z" level=info msg="cleaning up dead shim" id=ad97d351e3779291cb226cf01ec8839c0029662d31004bd5167c6bd5953e181f namespace=moby Jun 12 23:02:48.429649 systemd-networkd[2176]: veth954697e: Lost carrier Jun 12 23:02:48.429956 kernel: docker0: port 1(veth954697e) entered disabled state Jun 12 23:02:48.429981 kernel: vethb3dadc6: renamed from eth0 Jun 12 23:02:48.450000 audit[4782]: NETFILTER_CFG table=raw:72 family=2 entries=1 op=nft_unregister_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:48.450000 audit[4782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffddc07a90 a2=0 a3=0 items=0 ppid=2935 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.450000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:48.457173 systemd-networkd[2176]: veth954697e: Link DOWN Jun 12 23:02:48.464856 kernel: docker0: port 1(veth954697e) entered disabled state Jun 12 23:02:48.464907 kernel: veth954697e (unregistering): left allmulticast mode Jun 12 23:02:48.468685 kernel: veth954697e (unregistering): left promiscuous mode Jun 12 23:02:48.456000 audit: ANOM_PROMISCUOUS dev=veth954697e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:48.472307 kernel: docker0: port 1(veth954697e) entered disabled state Jun 12 23:02:48.456000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6280 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.456000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:48.480869 systemd[1]: run-docker-netns-457bd8cb1513.mount: Deactivated successfully. Jun 12 23:02:48.484681 systemd[1]: var-lib-docker-overlay2-49f1bd6fc72f433b399fe0e4437cee304fe361908d823168288357ec3a17a9d5-merged.mount: Deactivated successfully. Jun 12 23:02:48.490000 audit: BPF prog-id=129 op=UNLOAD Jun 12 23:02:48.490000 audit: BPF prog-id=133 op=UNLOAD Jun 12 23:02:48.650258 containerd[2455]: time="2026-06-12T23:02:48.650158788Z" level=info msg="connecting to shim 3020fa61030af2e4794740f478b7316bb8cb76be5bc5c878f8a46570e22f0af1" address="unix:///run/containerd/s/a588693c5d8bb54e7ba25aed31d7c7a8747a27cd9b324dac575d1b4eb5e057b7" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:48.669922 systemd[1]: Started docker-3020fa61030af2e4794740f478b7316bb8cb76be5bc5c878f8a46570e22f0af1.scope - libcontainer container 3020fa61030af2e4794740f478b7316bb8cb76be5bc5c878f8a46570e22f0af1. Jun 12 23:02:48.677000 audit: BPF prog-id=134 op=LOAD Jun 12 23:02:48.677000 audit: BPF prog-id=135 op=LOAD Jun 12 23:02:48.677000 audit[4812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=712915015f80 a2=98 a3=0 items=0 ppid=4801 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33303230666136313033306166326534373934373430663437 Jun 12 23:02:48.678000 audit: BPF prog-id=135 op=UNLOAD Jun 12 23:02:48.678000 audit[4812]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4801 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33303230666136313033306166326534373934373430663437 Jun 12 23:02:48.678000 audit: BPF prog-id=136 op=LOAD Jun 12 23:02:48.678000 audit[4812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=712915016258 a2=98 a3=0 items=0 ppid=4801 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33303230666136313033306166326534373934373430663437 Jun 12 23:02:48.678000 audit: BPF prog-id=137 op=LOAD Jun 12 23:02:48.678000 audit[4812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=712915015f98 a2=98 a3=0 items=0 ppid=4801 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33303230666136313033306166326534373934373430663437 Jun 12 23:02:48.678000 audit: BPF prog-id=137 op=UNLOAD Jun 12 23:02:48.678000 audit[4812]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=4801 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33303230666136313033306166326534373934373430663437 Jun 12 23:02:48.678000 audit: BPF prog-id=136 op=UNLOAD Jun 12 23:02:48.678000 audit[4812]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4801 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33303230666136313033306166326534373934373430663437 Jun 12 23:02:48.678000 audit: BPF prog-id=138 op=LOAD Jun 12 23:02:48.678000 audit[4812]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7129150164a8 a2=98 a3=0 items=0 ppid=4801 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33303230666136313033306166326534373934373430663437 Jun 12 23:02:48.691152 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:48.698831 kernel: docker0: port 1(veth1427e1c) entered blocking state Jun 12 23:02:48.698894 kernel: docker0: port 1(veth1427e1c) entered disabled state Jun 12 23:02:48.702640 kernel: veth1427e1c: entered allmulticast mode Jun 12 23:02:48.705654 kernel: veth1427e1c: entered promiscuous mode Jun 12 23:02:48.690000 audit: ANOM_PROMISCUOUS dev=veth1427e1c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:48.690000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760bc319e0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.690000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:48.707000 audit[4835]: NETFILTER_CFG table=raw:73 family=2 entries=1 op=nft_register_rule pid=4835 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:48.707000 audit[4835]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffef2078a0 a2=0 a3=0 items=0 ppid=2935 pid=4835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:48.707000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:48.708331 systemd-networkd[2176]: veth1427e1c: Link UP Jun 12 23:02:48.722800 kernel: eth0: renamed from veth7ba76e7 Jun 12 23:02:48.730413 kernel: docker0: port 1(veth1427e1c) entered blocking state Jun 12 23:02:48.730440 kernel: docker0: port 1(veth1427e1c) entered forwarding state Jun 12 23:02:48.730849 systemd-networkd[2176]: veth1427e1c: Gained carrier Jun 12 23:02:48.731438 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:49.759003 systemd[1]: docker-3020fa61030af2e4794740f478b7316bb8cb76be5bc5c878f8a46570e22f0af1.scope: Deactivated successfully. Jun 12 23:02:49.770457 dockerd[2935]: time="2026-06-12T23:02:49.770418167Z" level=info msg="ignoring event" container=3020fa61030af2e4794740f478b7316bb8cb76be5bc5c878f8a46570e22f0af1 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:49.770741 containerd[2455]: time="2026-06-12T23:02:49.770460925Z" level=info msg="shim disconnected" id=3020fa61030af2e4794740f478b7316bb8cb76be5bc5c878f8a46570e22f0af1 namespace=moby Jun 12 23:02:49.770741 containerd[2455]: time="2026-06-12T23:02:49.770536625Z" level=info msg="cleaning up after shim disconnected" id=3020fa61030af2e4794740f478b7316bb8cb76be5bc5c878f8a46570e22f0af1 namespace=moby Jun 12 23:02:49.770741 containerd[2455]: time="2026-06-12T23:02:49.770548465Z" level=info msg="cleaning up dead shim" id=3020fa61030af2e4794740f478b7316bb8cb76be5bc5c878f8a46570e22f0af1 namespace=moby Jun 12 23:02:49.793804 kernel: docker0: port 1(veth1427e1c) entered disabled state Jun 12 23:02:49.793977 systemd-networkd[2176]: veth1427e1c: Lost carrier Jun 12 23:02:49.797800 kernel: veth7ba76e7: renamed from eth0 Jun 12 23:02:49.818000 audit[4866]: NETFILTER_CFG table=raw:74 family=2 entries=1 op=nft_unregister_rule pid=4866 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:49.818000 audit[4866]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdad92750 a2=0 a3=0 items=0 ppid=2935 pid=4866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:49.818000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:49.826200 systemd-networkd[2176]: veth1427e1c: Link DOWN Jun 12 23:02:49.833551 kernel: docker0: port 1(veth1427e1c) entered disabled state Jun 12 23:02:49.833604 kernel: veth1427e1c (unregistering): left allmulticast mode Jun 12 23:02:49.837051 kernel: veth1427e1c (unregistering): left promiscuous mode Jun 12 23:02:49.825000 audit: ANOM_PROMISCUOUS dev=veth1427e1c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:49.840898 kernel: docker0: port 1(veth1427e1c) entered disabled state Jun 12 23:02:49.825000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f71a0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:49.825000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:49.848440 systemd[1]: run-docker-netns-92d07b370168.mount: Deactivated successfully. Jun 12 23:02:49.851072 systemd[1]: var-lib-docker-overlay2-f61fbeb78f653c24dccea7de9381bdeb79852548e2d41eb852fc380a220c663b-merged.mount: Deactivated successfully. Jun 12 23:02:49.860000 audit: BPF prog-id=134 op=UNLOAD Jun 12 23:02:49.860000 audit: BPF prog-id=138 op=UNLOAD Jun 12 23:02:49.951710 systemd[1]: var-lib-docker-overlay2-36e7b538adbb57eaa93d491bba8e84502a69fee8093b3ad4d775719099025cd6\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:50.020290 containerd[2455]: time="2026-06-12T23:02:50.020158236Z" level=info msg="connecting to shim f6cf2685e737e6a16fddf6591604735f1bed7fb42a68218e829c33688c544060" address="unix:///run/containerd/s/a3dddf5956304b048d864ad52896689323fefe44dc24cd5be1844c5947feda3f" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:50.040938 systemd[1]: Started docker-f6cf2685e737e6a16fddf6591604735f1bed7fb42a68218e829c33688c544060.scope - libcontainer container f6cf2685e737e6a16fddf6591604735f1bed7fb42a68218e829c33688c544060. Jun 12 23:02:50.048000 audit: BPF prog-id=139 op=LOAD Jun 12 23:02:50.049000 audit: BPF prog-id=140 op=LOAD Jun 12 23:02:50.049000 audit[4895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=598b34bfbf80 a2=98 a3=0 items=0 ppid=4883 pid=4895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:50.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366366323638356537333765366131366664646636353931 Jun 12 23:02:50.049000 audit: BPF prog-id=140 op=UNLOAD Jun 12 23:02:50.049000 audit[4895]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4883 pid=4895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:50.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366366323638356537333765366131366664646636353931 Jun 12 23:02:50.049000 audit: BPF prog-id=141 op=LOAD Jun 12 23:02:50.049000 audit[4895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=598b34bfc258 a2=98 a3=0 items=0 ppid=4883 pid=4895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:50.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366366323638356537333765366131366664646636353931 Jun 12 23:02:50.049000 audit: BPF prog-id=142 op=LOAD Jun 12 23:02:50.049000 audit[4895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=598b34bfbf98 a2=98 a3=0 items=0 ppid=4883 pid=4895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:50.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366366323638356537333765366131366664646636353931 Jun 12 23:02:50.049000 audit: BPF prog-id=142 op=UNLOAD Jun 12 23:02:50.049000 audit[4895]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4883 pid=4895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:50.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366366323638356537333765366131366664646636353931 Jun 12 23:02:50.049000 audit: BPF prog-id=141 op=UNLOAD Jun 12 23:02:50.049000 audit[4895]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4883 pid=4895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:50.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366366323638356537333765366131366664646636353931 Jun 12 23:02:50.049000 audit: BPF prog-id=143 op=LOAD Jun 12 23:02:50.049000 audit[4895]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=598b34bfc4a8 a2=98 a3=0 items=0 ppid=4883 pid=4895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:50.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66366366323638356537333765366131366664646636353931 Jun 12 23:02:50.061401 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:50.069848 kernel: docker0: port 1(vethb62ac4c) entered blocking state Jun 12 23:02:50.069920 kernel: docker0: port 1(vethb62ac4c) entered disabled state Jun 12 23:02:50.073933 kernel: vethb62ac4c: entered allmulticast mode Jun 12 23:02:50.076942 kernel: vethb62ac4c: entered promiscuous mode Jun 12 23:02:50.059000 audit: ANOM_PROMISCUOUS dev=vethb62ac4c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:50.059000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b241cb0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:50.059000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:50.080000 audit[4920]: NETFILTER_CFG table=raw:75 family=2 entries=1 op=nft_register_rule pid=4920 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:50.080000 audit[4920]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff96a50e0 a2=0 a3=0 items=0 ppid=2935 pid=4920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:50.080000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:50.082073 systemd-networkd[2176]: vethb62ac4c: Link UP Jun 12 23:02:50.095796 kernel: eth0: renamed from veth0f1d918 Jun 12 23:02:50.096446 kernel: docker0: port 1(vethb62ac4c) entered blocking state Jun 12 23:02:50.102926 kernel: docker0: port 1(vethb62ac4c) entered forwarding state Jun 12 23:02:50.103334 systemd-networkd[2176]: vethb62ac4c: Gained carrier Jun 12 23:02:50.103983 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:51.127525 systemd[1]: docker-f6cf2685e737e6a16fddf6591604735f1bed7fb42a68218e829c33688c544060.scope: Deactivated successfully. Jun 12 23:02:51.139524 dockerd[2935]: time="2026-06-12T23:02:51.139462975Z" level=info msg="ignoring event" container=f6cf2685e737e6a16fddf6591604735f1bed7fb42a68218e829c33688c544060 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:51.140071 containerd[2455]: time="2026-06-12T23:02:51.139690820Z" level=info msg="shim disconnected" id=f6cf2685e737e6a16fddf6591604735f1bed7fb42a68218e829c33688c544060 namespace=moby Jun 12 23:02:51.140071 containerd[2455]: time="2026-06-12T23:02:51.139716603Z" level=info msg="cleaning up after shim disconnected" id=f6cf2685e737e6a16fddf6591604735f1bed7fb42a68218e829c33688c544060 namespace=moby Jun 12 23:02:51.140071 containerd[2455]: time="2026-06-12T23:02:51.139722466Z" level=info msg="cleaning up dead shim" id=f6cf2685e737e6a16fddf6591604735f1bed7fb42a68218e829c33688c544060 namespace=moby Jun 12 23:02:51.178469 systemd-networkd[2176]: vethb62ac4c: Lost carrier Jun 12 23:02:51.178834 kernel: docker0: port 1(vethb62ac4c) entered disabled state Jun 12 23:02:51.181803 kernel: veth0f1d918: renamed from eth0 Jun 12 23:02:51.203000 audit[4951]: NETFILTER_CFG table=raw:76 family=2 entries=1 op=nft_unregister_rule pid=4951 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:51.203000 audit[4951]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc9ab6b90 a2=0 a3=0 items=0 ppid=2935 pid=4951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.203000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:51.213163 systemd-networkd[2176]: vethb62ac4c: Link DOWN Jun 12 23:02:51.217797 kernel: docker0: port 1(vethb62ac4c) entered disabled state Jun 12 23:02:51.217850 kernel: vethb62ac4c (unregistering): left allmulticast mode Jun 12 23:02:51.224262 kernel: vethb62ac4c (unregistering): left promiscuous mode Jun 12 23:02:51.211000 audit: ANOM_PROMISCUOUS dev=vethb62ac4c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:51.228716 kernel: docker0: port 1(vethb62ac4c) entered disabled state Jun 12 23:02:51.211000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b4f1d00 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.211000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:51.247732 systemd[1]: run-docker-netns-026d5aec4b7a.mount: Deactivated successfully. Jun 12 23:02:51.252355 systemd[1]: var-lib-docker-overlay2-36e7b538adbb57eaa93d491bba8e84502a69fee8093b3ad4d775719099025cd6-merged.mount: Deactivated successfully. Jun 12 23:02:51.256000 audit: BPF prog-id=139 op=UNLOAD Jun 12 23:02:51.256000 audit: BPF prog-id=143 op=UNLOAD Jun 12 23:02:51.348763 systemd[1]: var-lib-docker-overlay2-e877d20b1fe9f4fbb3a0ec03d49aa0162140ad3b1248991cb514d9219a536b1b\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:51.421275 containerd[2455]: time="2026-06-12T23:02:51.421021103Z" level=info msg="connecting to shim 3f781f3d1cc163d7c3d6721fef26d81d848054f31d94af184a417da6106c20e0" address="unix:///run/containerd/s/797a10bf042a90bb017d4eabd5af3e80ddd704ed858561676af29588c8783bf7" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:51.436934 systemd[1]: Started docker-3f781f3d1cc163d7c3d6721fef26d81d848054f31d94af184a417da6106c20e0.scope - libcontainer container 3f781f3d1cc163d7c3d6721fef26d81d848054f31d94af184a417da6106c20e0. Jun 12 23:02:51.443000 audit: BPF prog-id=144 op=LOAD Jun 12 23:02:51.444000 audit: BPF prog-id=145 op=LOAD Jun 12 23:02:51.444000 audit[4981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=11839754ff80 a2=98 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33663738316633643163633136336437633364363732316665 Jun 12 23:02:51.444000 audit: BPF prog-id=145 op=UNLOAD Jun 12 23:02:51.444000 audit[4981]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33663738316633643163633136336437633364363732316665 Jun 12 23:02:51.444000 audit: BPF prog-id=146 op=LOAD Jun 12 23:02:51.444000 audit[4981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=118397550258 a2=98 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33663738316633643163633136336437633364363732316665 Jun 12 23:02:51.444000 audit: BPF prog-id=147 op=LOAD Jun 12 23:02:51.444000 audit[4981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=11839754ff98 a2=98 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33663738316633643163633136336437633364363732316665 Jun 12 23:02:51.444000 audit: BPF prog-id=147 op=UNLOAD Jun 12 23:02:51.444000 audit[4981]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33663738316633643163633136336437633364363732316665 Jun 12 23:02:51.444000 audit: BPF prog-id=146 op=UNLOAD Jun 12 23:02:51.444000 audit[4981]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.444000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33663738316633643163633136336437633364363732316665 Jun 12 23:02:51.445000 audit: BPF prog-id=148 op=LOAD Jun 12 23:02:51.445000 audit[4981]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1183975504a8 a2=98 a3=0 items=0 ppid=4969 pid=4981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33663738316633643163633136336437633364363732316665 Jun 12 23:02:51.461020 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:51.469600 kernel: docker0: port 1(veth8b1091b) entered blocking state Jun 12 23:02:51.469681 kernel: docker0: port 1(veth8b1091b) entered disabled state Jun 12 23:02:51.473660 kernel: veth8b1091b: entered allmulticast mode Jun 12 23:02:51.459000 audit: ANOM_PROMISCUOUS dev=veth8b1091b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:51.476887 kernel: veth8b1091b: entered promiscuous mode Jun 12 23:02:51.459000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b483e30 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.459000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:51.477000 audit[5004]: NETFILTER_CFG table=raw:77 family=2 entries=1 op=nft_register_rule pid=5004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:51.477000 audit[5004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffed79e700 a2=0 a3=0 items=0 ppid=2935 pid=5004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:51.477000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:51.479596 systemd-networkd[2176]: veth8b1091b: Link UP Jun 12 23:02:51.502789 kernel: eth0: renamed from veth6f9132b Jun 12 23:02:51.502852 kernel: docker0: port 1(veth8b1091b) entered blocking state Jun 12 23:02:51.502865 kernel: docker0: port 1(veth8b1091b) entered forwarding state Jun 12 23:02:51.505331 systemd-networkd[2176]: veth8b1091b: Gained carrier Jun 12 23:02:51.505506 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:52.531693 systemd[1]: docker-3f781f3d1cc163d7c3d6721fef26d81d848054f31d94af184a417da6106c20e0.scope: Deactivated successfully. Jun 12 23:02:52.542515 containerd[2455]: time="2026-06-12T23:02:52.542474539Z" level=info msg="shim disconnected" id=3f781f3d1cc163d7c3d6721fef26d81d848054f31d94af184a417da6106c20e0 namespace=moby Jun 12 23:02:52.542515 containerd[2455]: time="2026-06-12T23:02:52.542509873Z" level=info msg="cleaning up after shim disconnected" id=3f781f3d1cc163d7c3d6721fef26d81d848054f31d94af184a417da6106c20e0 namespace=moby Jun 12 23:02:52.542515 containerd[2455]: time="2026-06-12T23:02:52.542516961Z" level=info msg="cleaning up dead shim" id=3f781f3d1cc163d7c3d6721fef26d81d848054f31d94af184a417da6106c20e0 namespace=moby Jun 12 23:02:52.543511 dockerd[2935]: time="2026-06-12T23:02:52.543350041Z" level=info msg="ignoring event" container=3f781f3d1cc163d7c3d6721fef26d81d848054f31d94af184a417da6106c20e0 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:52.562508 systemd-networkd[2176]: veth8b1091b: Lost carrier Jun 12 23:02:52.563844 kernel: docker0: port 1(veth8b1091b) entered disabled state Jun 12 23:02:52.563882 kernel: veth6f9132b: renamed from eth0 Jun 12 23:02:52.579000 audit[5035]: NETFILTER_CFG table=raw:78 family=2 entries=1 op=nft_unregister_rule pid=5035 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:52.584517 kernel: kauditd_printk_skb: 134 callbacks suppressed Jun 12 23:02:52.584556 kernel: audit: type=1325 audit(1781305372.579:667): table=raw:78 family=2 entries=1 op=nft_unregister_rule pid=5035 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:52.579000 audit[5035]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc81216b0 a2=0 a3=0 items=0 ppid=2935 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.611674 kernel: audit: type=1300 audit(1781305372.579:667): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc81216b0 a2=0 a3=0 items=0 ppid=2935 pid=5035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.579000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:52.623586 kernel: audit: type=1327 audit(1781305372.579:667): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:52.626325 systemd-networkd[2176]: veth8b1091b: Link DOWN Jun 12 23:02:52.630793 kernel: docker0: port 1(veth8b1091b) entered disabled state Jun 12 23:02:52.639795 kernel: veth8b1091b (unregistering): left allmulticast mode Jun 12 23:02:52.639850 kernel: veth8b1091b (unregistering): left promiscuous mode Jun 12 23:02:52.624000 audit: ANOM_PROMISCUOUS dev=veth8b1091b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:52.651174 kernel: audit: type=1700 audit(1781305372.624:668): dev=veth8b1091b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:52.651222 kernel: docker0: port 1(veth8b1091b) entered disabled state Jun 12 23:02:52.624000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8dbde0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.660198 systemd[1]: run-docker-netns-d33be33d101c.mount: Deactivated successfully. Jun 12 23:02:52.624000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:52.677845 systemd[1]: var-lib-docker-overlay2-e877d20b1fe9f4fbb3a0ec03d49aa0162140ad3b1248991cb514d9219a536b1b-merged.mount: Deactivated successfully. Jun 12 23:02:52.692309 kernel: audit: type=1300 audit(1781305372.624:668): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8dbde0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.692340 kernel: audit: type=1327 audit(1781305372.624:668): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:52.705000 audit: BPF prog-id=144 op=UNLOAD Jun 12 23:02:52.705000 audit: BPF prog-id=148 op=UNLOAD Jun 12 23:02:52.731587 kernel: audit: type=1334 audit(1781305372.705:669): prog-id=144 op=UNLOAD Jun 12 23:02:52.731636 kernel: audit: type=1334 audit(1781305372.705:670): prog-id=148 op=UNLOAD Jun 12 23:02:52.787073 systemd[1]: var-lib-docker-overlay2-dde38e4481c026239c7caf6faad959db02a3de1173f65715dd3f111615722722\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:52.854244 containerd[2455]: time="2026-06-12T23:02:52.854185493Z" level=info msg="connecting to shim fe9f7aeacddaa971b9210ea7efa01a4dbbb76a1375ea75411c4b9ad38382a215" address="unix:///run/containerd/s/f0a896be53df584d246a799dc40684a7d6ad7cdfe06da379695f75ccf450ce5d" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:52.870929 systemd[1]: Started docker-fe9f7aeacddaa971b9210ea7efa01a4dbbb76a1375ea75411c4b9ad38382a215.scope - libcontainer container fe9f7aeacddaa971b9210ea7efa01a4dbbb76a1375ea75411c4b9ad38382a215. Jun 12 23:02:52.877000 audit: BPF prog-id=149 op=LOAD Jun 12 23:02:52.882000 audit: BPF prog-id=150 op=LOAD Jun 12 23:02:52.888579 kernel: audit: type=1334 audit(1781305372.877:671): prog-id=149 op=LOAD Jun 12 23:02:52.888820 kernel: audit: type=1334 audit(1781305372.882:672): prog-id=150 op=LOAD Jun 12 23:02:52.882000 audit[5064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7cbe64c37f80 a2=98 a3=0 items=0 ppid=5052 pid=5064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653966376165616364646161393731623932313065613765 Jun 12 23:02:52.883000 audit: BPF prog-id=150 op=UNLOAD Jun 12 23:02:52.883000 audit[5064]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5052 pid=5064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653966376165616364646161393731623932313065613765 Jun 12 23:02:52.884000 audit: BPF prog-id=151 op=LOAD Jun 12 23:02:52.884000 audit[5064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7cbe64c38258 a2=98 a3=0 items=0 ppid=5052 pid=5064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653966376165616364646161393731623932313065613765 Jun 12 23:02:52.887000 audit: BPF prog-id=152 op=LOAD Jun 12 23:02:52.887000 audit[5064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7cbe64c37f98 a2=98 a3=0 items=0 ppid=5052 pid=5064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653966376165616364646161393731623932313065613765 Jun 12 23:02:52.887000 audit: BPF prog-id=152 op=UNLOAD Jun 12 23:02:52.887000 audit[5064]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5052 pid=5064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653966376165616364646161393731623932313065613765 Jun 12 23:02:52.887000 audit: BPF prog-id=151 op=UNLOAD Jun 12 23:02:52.887000 audit[5064]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5052 pid=5064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653966376165616364646161393731623932313065613765 Jun 12 23:02:52.887000 audit: BPF prog-id=153 op=LOAD Jun 12 23:02:52.887000 audit[5064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7cbe64c384a8 a2=98 a3=0 items=0 ppid=5052 pid=5064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66653966376165616364646161393731623932313065613765 Jun 12 23:02:52.908270 kernel: docker0: port 1(veth3da7336) entered blocking state Jun 12 23:02:52.908335 kernel: docker0: port 1(veth3da7336) entered disabled state Jun 12 23:02:52.911067 kernel: veth3da7336: entered allmulticast mode Jun 12 23:02:52.913881 kernel: veth3da7336: entered promiscuous mode Jun 12 23:02:52.899000 audit: ANOM_PROMISCUOUS dev=veth3da7336 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:52.899000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0d590 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.899000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:52.914474 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:52.914000 audit[5085]: NETFILTER_CFG table=raw:79 family=2 entries=1 op=nft_register_rule pid=5085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:52.914000 audit[5085]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdde26d90 a2=0 a3=0 items=0 ppid=2935 pid=5085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:52.914000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:52.916715 systemd-networkd[2176]: veth3da7336: Link UP Jun 12 23:02:52.940970 kernel: eth0: renamed from vethc62cdd3 Jun 12 23:02:52.941050 kernel: docker0: port 1(veth3da7336) entered blocking state Jun 12 23:02:52.944628 kernel: docker0: port 1(veth3da7336) entered forwarding state Jun 12 23:02:52.944982 systemd-networkd[2176]: veth3da7336: Gained carrier Jun 12 23:02:52.945327 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:53.968997 systemd[1]: docker-fe9f7aeacddaa971b9210ea7efa01a4dbbb76a1375ea75411c4b9ad38382a215.scope: Deactivated successfully. Jun 12 23:02:53.980700 dockerd[2935]: time="2026-06-12T23:02:53.980573037Z" level=info msg="ignoring event" container=fe9f7aeacddaa971b9210ea7efa01a4dbbb76a1375ea75411c4b9ad38382a215 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:53.981297 containerd[2455]: time="2026-06-12T23:02:53.981152537Z" level=info msg="shim disconnected" id=fe9f7aeacddaa971b9210ea7efa01a4dbbb76a1375ea75411c4b9ad38382a215 namespace=moby Jun 12 23:02:53.981297 containerd[2455]: time="2026-06-12T23:02:53.981180992Z" level=info msg="cleaning up after shim disconnected" id=fe9f7aeacddaa971b9210ea7efa01a4dbbb76a1375ea75411c4b9ad38382a215 namespace=moby Jun 12 23:02:53.981297 containerd[2455]: time="2026-06-12T23:02:53.981186776Z" level=info msg="cleaning up dead shim" id=fe9f7aeacddaa971b9210ea7efa01a4dbbb76a1375ea75411c4b9ad38382a215 namespace=moby Jun 12 23:02:54.001634 systemd-networkd[2176]: veth3da7336: Lost carrier Jun 12 23:02:54.002063 kernel: docker0: port 1(veth3da7336) entered disabled state Jun 12 23:02:54.004796 kernel: vethc62cdd3: renamed from eth0 Jun 12 23:02:54.017000 audit[5115]: NETFILTER_CFG table=raw:80 family=2 entries=1 op=nft_unregister_rule pid=5115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:54.017000 audit[5115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffb014320 a2=0 a3=0 items=0 ppid=2935 pid=5115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.017000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:54.022127 systemd-networkd[2176]: veth3da7336: Link DOWN Jun 12 23:02:54.026792 kernel: docker0: port 1(veth3da7336) entered disabled state Jun 12 23:02:54.034257 kernel: veth3da7336 (unregistering): left allmulticast mode Jun 12 23:02:54.034318 kernel: veth3da7336 (unregistering): left promiscuous mode Jun 12 23:02:54.020000 audit: ANOM_PROMISCUOUS dev=veth3da7336 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:54.037687 kernel: docker0: port 1(veth3da7336) entered disabled state Jun 12 23:02:54.020000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ffc20 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.020000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:54.045037 systemd[1]: run-docker-netns-593d9c471a93.mount: Deactivated successfully. Jun 12 23:02:54.048842 systemd[1]: var-lib-docker-overlay2-dde38e4481c026239c7caf6faad959db02a3de1173f65715dd3f111615722722-merged.mount: Deactivated successfully. Jun 12 23:02:54.056000 audit: BPF prog-id=149 op=UNLOAD Jun 12 23:02:54.056000 audit: BPF prog-id=153 op=UNLOAD Jun 12 23:02:54.145831 systemd[1]: var-lib-docker-overlay2-89c78bc78c0b7325e0a39777a5f5f293d03b56df5bc57788d5ae99caa0aa8c85\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:54.225378 containerd[2455]: time="2026-06-12T23:02:54.225344592Z" level=info msg="connecting to shim e2aef8c2e46ad1fe8bd0b7143e9cf3189422e1af9b4bad803b17a58c6c6747ff" address="unix:///run/containerd/s/66031f432a7aa1f350bc166340371db3609f21df07c8f9cfc653ca64fb1e8750" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:54.243922 systemd[1]: Started docker-e2aef8c2e46ad1fe8bd0b7143e9cf3189422e1af9b4bad803b17a58c6c6747ff.scope - libcontainer container e2aef8c2e46ad1fe8bd0b7143e9cf3189422e1af9b4bad803b17a58c6c6747ff. Jun 12 23:02:54.252000 audit: BPF prog-id=154 op=LOAD Jun 12 23:02:54.253000 audit: BPF prog-id=155 op=LOAD Jun 12 23:02:54.253000 audit[5145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6dcfa0837f80 a2=98 a3=0 items=0 ppid=5134 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65326165663863326534366164316665386264306237313433 Jun 12 23:02:54.253000 audit: BPF prog-id=155 op=UNLOAD Jun 12 23:02:54.253000 audit[5145]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5134 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65326165663863326534366164316665386264306237313433 Jun 12 23:02:54.253000 audit: BPF prog-id=156 op=LOAD Jun 12 23:02:54.253000 audit[5145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6dcfa0838258 a2=98 a3=0 items=0 ppid=5134 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65326165663863326534366164316665386264306237313433 Jun 12 23:02:54.253000 audit: BPF prog-id=157 op=LOAD Jun 12 23:02:54.253000 audit[5145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6dcfa0837f98 a2=98 a3=0 items=0 ppid=5134 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65326165663863326534366164316665386264306237313433 Jun 12 23:02:54.253000 audit: BPF prog-id=157 op=UNLOAD Jun 12 23:02:54.253000 audit[5145]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5134 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65326165663863326534366164316665386264306237313433 Jun 12 23:02:54.253000 audit: BPF prog-id=156 op=UNLOAD Jun 12 23:02:54.253000 audit[5145]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5134 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65326165663863326534366164316665386264306237313433 Jun 12 23:02:54.253000 audit: BPF prog-id=158 op=LOAD Jun 12 23:02:54.253000 audit[5145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6dcfa08384a8 a2=98 a3=0 items=0 ppid=5134 pid=5145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65326165663863326534366164316665386264306237313433 Jun 12 23:02:54.274920 kernel: docker0: port 1(vethab7ecdc) entered blocking state Jun 12 23:02:54.274995 kernel: docker0: port 1(vethab7ecdc) entered disabled state Jun 12 23:02:54.278234 kernel: vethab7ecdc: entered allmulticast mode Jun 12 23:02:54.281205 kernel: vethab7ecdc: entered promiscuous mode Jun 12 23:02:54.266000 audit: ANOM_PROMISCUOUS dev=vethab7ecdc prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:54.266000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f8510 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.266000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:54.282727 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:54.281000 audit[5165]: NETFILTER_CFG table=raw:81 family=2 entries=1 op=nft_register_rule pid=5165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:54.281000 audit[5165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffee4af680 a2=0 a3=0 items=0 ppid=2935 pid=5165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:54.281000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:54.283737 systemd-networkd[2176]: vethab7ecdc: Link UP Jun 12 23:02:54.301986 kernel: eth0: renamed from veth38aa8af Jun 12 23:02:54.302079 kernel: docker0: port 1(vethab7ecdc) entered blocking state Jun 12 23:02:54.306398 kernel: docker0: port 1(vethab7ecdc) entered forwarding state Jun 12 23:02:54.306861 systemd-networkd[2176]: vethab7ecdc: Gained carrier Jun 12 23:02:54.307080 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:55.330895 systemd[1]: docker-e2aef8c2e46ad1fe8bd0b7143e9cf3189422e1af9b4bad803b17a58c6c6747ff.scope: Deactivated successfully. Jun 12 23:02:55.341618 containerd[2455]: time="2026-06-12T23:02:55.341591230Z" level=info msg="shim disconnected" id=e2aef8c2e46ad1fe8bd0b7143e9cf3189422e1af9b4bad803b17a58c6c6747ff namespace=moby Jun 12 23:02:55.342036 containerd[2455]: time="2026-06-12T23:02:55.341708808Z" level=info msg="cleaning up after shim disconnected" id=e2aef8c2e46ad1fe8bd0b7143e9cf3189422e1af9b4bad803b17a58c6c6747ff namespace=moby Jun 12 23:02:55.342036 containerd[2455]: time="2026-06-12T23:02:55.341721303Z" level=info msg="cleaning up dead shim" id=e2aef8c2e46ad1fe8bd0b7143e9cf3189422e1af9b4bad803b17a58c6c6747ff namespace=moby Jun 12 23:02:55.342076 dockerd[2935]: time="2026-06-12T23:02:55.341753694Z" level=info msg="ignoring event" container=e2aef8c2e46ad1fe8bd0b7143e9cf3189422e1af9b4bad803b17a58c6c6747ff module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:55.363020 systemd-networkd[2176]: vethab7ecdc: Lost carrier Jun 12 23:02:55.366973 kernel: docker0: port 1(vethab7ecdc) entered disabled state Jun 12 23:02:55.366999 kernel: veth38aa8af: renamed from eth0 Jun 12 23:02:55.382000 audit[5195]: NETFILTER_CFG table=raw:82 family=2 entries=1 op=nft_unregister_rule pid=5195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:55.382000 audit[5195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe56fc4a0 a2=0 a3=0 items=0 ppid=2935 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.382000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:55.390166 systemd-networkd[2176]: vethab7ecdc: Link DOWN Jun 12 23:02:55.393861 kernel: docker0: port 1(vethab7ecdc) entered disabled state Jun 12 23:02:55.401120 kernel: vethab7ecdc (unregistering): left allmulticast mode Jun 12 23:02:55.401171 kernel: vethab7ecdc (unregistering): left promiscuous mode Jun 12 23:02:55.405062 kernel: docker0: port 1(vethab7ecdc) entered disabled state Jun 12 23:02:55.388000 audit: ANOM_PROMISCUOUS dev=vethab7ecdc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:55.388000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c29a4c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.388000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:55.417472 systemd[1]: run-docker-netns-43985133dd90.mount: Deactivated successfully. Jun 12 23:02:55.420238 systemd[1]: var-lib-docker-overlay2-89c78bc78c0b7325e0a39777a5f5f293d03b56df5bc57788d5ae99caa0aa8c85-merged.mount: Deactivated successfully. Jun 12 23:02:55.424000 audit: BPF prog-id=154 op=UNLOAD Jun 12 23:02:55.424000 audit: BPF prog-id=158 op=UNLOAD Jun 12 23:02:55.493333 systemd[1]: var-lib-docker-overlay2-0c37c9e9d50824b2b722e4a63f9d4de4f4469b40a6b32f4ef93ce8f0b223a7cd\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:55.577163 containerd[2455]: time="2026-06-12T23:02:55.577090477Z" level=info msg="connecting to shim 4292c0bde19ee50212be2b35ae89857d6fcc1ec313488b46dde71bea122bc3e6" address="unix:///run/containerd/s/ac8f79b21b6d7de8747bace64f72babd861111cb810515ecc3c99b5e638c7924" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:55.592932 systemd[1]: Started docker-4292c0bde19ee50212be2b35ae89857d6fcc1ec313488b46dde71bea122bc3e6.scope - libcontainer container 4292c0bde19ee50212be2b35ae89857d6fcc1ec313488b46dde71bea122bc3e6. Jun 12 23:02:55.599000 audit: BPF prog-id=159 op=LOAD Jun 12 23:02:55.600000 audit: BPF prog-id=160 op=LOAD Jun 12 23:02:55.600000 audit[5222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3da8c8433f80 a2=98 a3=0 items=0 ppid=5212 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34323932633062646531396565353032313262653262333561 Jun 12 23:02:55.600000 audit: BPF prog-id=160 op=UNLOAD Jun 12 23:02:55.600000 audit[5222]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5212 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34323932633062646531396565353032313262653262333561 Jun 12 23:02:55.600000 audit: BPF prog-id=161 op=LOAD Jun 12 23:02:55.600000 audit[5222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3da8c8434258 a2=98 a3=0 items=0 ppid=5212 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34323932633062646531396565353032313262653262333561 Jun 12 23:02:55.600000 audit: BPF prog-id=162 op=LOAD Jun 12 23:02:55.600000 audit[5222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3da8c8433f98 a2=98 a3=0 items=0 ppid=5212 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34323932633062646531396565353032313262653262333561 Jun 12 23:02:55.600000 audit: BPF prog-id=162 op=UNLOAD Jun 12 23:02:55.600000 audit[5222]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5212 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34323932633062646531396565353032313262653262333561 Jun 12 23:02:55.600000 audit: BPF prog-id=161 op=UNLOAD Jun 12 23:02:55.600000 audit[5222]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5212 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34323932633062646531396565353032313262653262333561 Jun 12 23:02:55.601000 audit: BPF prog-id=163 op=LOAD Jun 12 23:02:55.601000 audit[5222]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3da8c84344a8 a2=98 a3=0 items=0 ppid=5212 pid=5222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34323932633062646531396565353032313262653262333561 Jun 12 23:02:55.621159 kernel: docker0: port 1(veth273b09e) entered blocking state Jun 12 23:02:55.621237 kernel: docker0: port 1(veth273b09e) entered disabled state Jun 12 23:02:55.624063 kernel: veth273b09e: entered allmulticast mode Jun 12 23:02:55.626942 kernel: veth273b09e: entered promiscuous mode Jun 12 23:02:55.612000 audit: ANOM_PROMISCUOUS dev=veth273b09e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:55.612000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f92f0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.612000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:55.628101 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:55.628000 audit[5241]: NETFILTER_CFG table=raw:83 family=2 entries=1 op=nft_register_rule pid=5241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:55.628000 audit[5241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdef9b060 a2=0 a3=0 items=0 ppid=2935 pid=5241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:55.628000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:55.630337 systemd-networkd[2176]: veth273b09e: Link UP Jun 12 23:02:55.644790 kernel: eth0: renamed from veth17cc17d Jun 12 23:02:55.654694 kernel: docker0: port 1(veth273b09e) entered blocking state Jun 12 23:02:55.654747 kernel: docker0: port 1(veth273b09e) entered forwarding state Jun 12 23:02:55.654854 systemd-networkd[2176]: veth273b09e: Gained carrier Jun 12 23:02:55.655255 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:56.687224 systemd[1]: docker-4292c0bde19ee50212be2b35ae89857d6fcc1ec313488b46dde71bea122bc3e6.scope: Deactivated successfully. Jun 12 23:02:56.699797 dockerd[2935]: time="2026-06-12T23:02:56.699737312Z" level=info msg="ignoring event" container=4292c0bde19ee50212be2b35ae89857d6fcc1ec313488b46dde71bea122bc3e6 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:56.700174 containerd[2455]: time="2026-06-12T23:02:56.699981061Z" level=info msg="shim disconnected" id=4292c0bde19ee50212be2b35ae89857d6fcc1ec313488b46dde71bea122bc3e6 namespace=moby Jun 12 23:02:56.700174 containerd[2455]: time="2026-06-12T23:02:56.700004884Z" level=info msg="cleaning up after shim disconnected" id=4292c0bde19ee50212be2b35ae89857d6fcc1ec313488b46dde71bea122bc3e6 namespace=moby Jun 12 23:02:56.700174 containerd[2455]: time="2026-06-12T23:02:56.700010467Z" level=info msg="cleaning up dead shim" id=4292c0bde19ee50212be2b35ae89857d6fcc1ec313488b46dde71bea122bc3e6 namespace=moby Jun 12 23:02:56.721803 kernel: docker0: port 1(veth273b09e) entered disabled state Jun 12 23:02:56.721834 systemd-networkd[2176]: veth273b09e: Lost carrier Jun 12 23:02:56.725801 kernel: veth17cc17d: renamed from eth0 Jun 12 23:02:56.740102 systemd-networkd[2176]: veth273b09e: Gained IPv6LL Jun 12 23:02:56.741000 audit[5273]: NETFILTER_CFG table=raw:84 family=2 entries=1 op=nft_unregister_rule pid=5273 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:56.741000 audit[5273]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffeea60890 a2=0 a3=0 items=0 ppid=2935 pid=5273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.741000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:56.747168 systemd-networkd[2176]: veth273b09e: Link DOWN Jun 12 23:02:56.754981 kernel: docker0: port 1(veth273b09e) entered disabled state Jun 12 23:02:56.755030 kernel: veth273b09e (unregistering): left allmulticast mode Jun 12 23:02:56.758479 kernel: veth273b09e (unregistering): left promiscuous mode Jun 12 23:02:56.746000 audit: ANOM_PROMISCUOUS dev=veth273b09e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:56.762101 kernel: docker0: port 1(veth273b09e) entered disabled state Jun 12 23:02:56.746000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c530a40 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.746000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:56.771734 systemd[1]: run-docker-netns-be9d01a9d883.mount: Deactivated successfully. Jun 12 23:02:56.778255 systemd[1]: var-lib-docker-overlay2-0c37c9e9d50824b2b722e4a63f9d4de4f4469b40a6b32f4ef93ce8f0b223a7cd-merged.mount: Deactivated successfully. Jun 12 23:02:56.785000 audit: BPF prog-id=159 op=UNLOAD Jun 12 23:02:56.785000 audit: BPF prog-id=163 op=UNLOAD Jun 12 23:02:56.846838 systemd[1]: var-lib-docker-overlay2-ec4e6b65740146fcaa1dfeabb88a8d9ee5308e931b4c53cd2ac0f2f049ecc390\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:56.915850 containerd[2455]: time="2026-06-12T23:02:56.915736511Z" level=info msg="connecting to shim 477c682e92a784cf15c46735fc0a0c237d5389fa32ef0b78014fdbe0237151ec" address="unix:///run/containerd/s/f88179c037941c3b9024fd55da8dd7f46e66173985a6b9ae64925b2010b31d43" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:56.931925 systemd[1]: Started docker-477c682e92a784cf15c46735fc0a0c237d5389fa32ef0b78014fdbe0237151ec.scope - libcontainer container 477c682e92a784cf15c46735fc0a0c237d5389fa32ef0b78014fdbe0237151ec. Jun 12 23:02:56.938000 audit: BPF prog-id=164 op=LOAD Jun 12 23:02:56.938000 audit: BPF prog-id=165 op=LOAD Jun 12 23:02:56.938000 audit[5303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=79ea77847f80 a2=98 a3=0 items=0 ppid=5291 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373763363832653932613738346366313563343637333566 Jun 12 23:02:56.939000 audit: BPF prog-id=165 op=UNLOAD Jun 12 23:02:56.939000 audit[5303]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5291 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373763363832653932613738346366313563343637333566 Jun 12 23:02:56.939000 audit: BPF prog-id=166 op=LOAD Jun 12 23:02:56.939000 audit[5303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=79ea77848258 a2=98 a3=0 items=0 ppid=5291 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373763363832653932613738346366313563343637333566 Jun 12 23:02:56.939000 audit: BPF prog-id=167 op=LOAD Jun 12 23:02:56.939000 audit[5303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=79ea77847f98 a2=98 a3=0 items=0 ppid=5291 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373763363832653932613738346366313563343637333566 Jun 12 23:02:56.939000 audit: BPF prog-id=167 op=UNLOAD Jun 12 23:02:56.939000 audit[5303]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5291 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373763363832653932613738346366313563343637333566 Jun 12 23:02:56.939000 audit: BPF prog-id=166 op=UNLOAD Jun 12 23:02:56.939000 audit[5303]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5291 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373763363832653932613738346366313563343637333566 Jun 12 23:02:56.940000 audit: BPF prog-id=168 op=LOAD Jun 12 23:02:56.940000 audit[5303]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=79ea778484a8 a2=98 a3=0 items=0 ppid=5291 pid=5303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34373763363832653932613738346366313563343637333566 Jun 12 23:02:56.953839 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:56.958752 kernel: docker0: port 1(vethcd88c2b) entered blocking state Jun 12 23:02:56.958821 kernel: docker0: port 1(vethcd88c2b) entered disabled state Jun 12 23:02:56.961445 kernel: vethcd88c2b: entered allmulticast mode Jun 12 23:02:56.964797 kernel: vethcd88c2b: entered promiscuous mode Jun 12 23:02:56.951000 audit: ANOM_PROMISCUOUS dev=vethcd88c2b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:56.951000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaac90 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.951000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:56.965000 audit[5324]: NETFILTER_CFG table=raw:85 family=2 entries=1 op=nft_register_rule pid=5324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:56.965000 audit[5324]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffa4f5a90 a2=0 a3=0 items=0 ppid=2935 pid=5324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:56.965000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:56.967262 systemd-networkd[2176]: vethcd88c2b: Link UP Jun 12 23:02:56.992782 kernel: eth0: renamed from veth1ff4d5a Jun 12 23:02:56.992848 kernel: docker0: port 1(vethcd88c2b) entered blocking state Jun 12 23:02:56.992866 kernel: docker0: port 1(vethcd88c2b) entered forwarding state Jun 12 23:02:56.995071 systemd-networkd[2176]: vethcd88c2b: Gained carrier Jun 12 23:02:56.996011 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:58.019875 systemd[1]: docker-477c682e92a784cf15c46735fc0a0c237d5389fa32ef0b78014fdbe0237151ec.scope: Deactivated successfully. Jun 12 23:02:58.031048 dockerd[2935]: time="2026-06-12T23:02:58.031012643Z" level=info msg="ignoring event" container=477c682e92a784cf15c46735fc0a0c237d5389fa32ef0b78014fdbe0237151ec module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:58.031594 containerd[2455]: time="2026-06-12T23:02:58.031486114Z" level=info msg="shim disconnected" id=477c682e92a784cf15c46735fc0a0c237d5389fa32ef0b78014fdbe0237151ec namespace=moby Jun 12 23:02:58.031594 containerd[2455]: time="2026-06-12T23:02:58.031510305Z" level=info msg="cleaning up after shim disconnected" id=477c682e92a784cf15c46735fc0a0c237d5389fa32ef0b78014fdbe0237151ec namespace=moby Jun 12 23:02:58.031594 containerd[2455]: time="2026-06-12T23:02:58.031515809Z" level=info msg="cleaning up dead shim" id=477c682e92a784cf15c46735fc0a0c237d5389fa32ef0b78014fdbe0237151ec namespace=moby Jun 12 23:02:58.055805 kernel: docker0: port 1(vethcd88c2b) entered disabled state Jun 12 23:02:58.052983 systemd-networkd[2176]: vethcd88c2b: Lost carrier Jun 12 23:02:58.056132 kernel: veth1ff4d5a: renamed from eth0 Jun 12 23:02:58.069000 audit[5357]: NETFILTER_CFG table=raw:86 family=2 entries=1 op=nft_unregister_rule pid=5357 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:58.073637 kernel: kauditd_printk_skb: 134 callbacks suppressed Jun 12 23:02:58.073675 kernel: audit: type=1325 audit(1781305378.069:723): table=raw:86 family=2 entries=1 op=nft_unregister_rule pid=5357 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:58.069000 audit[5357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc3854940 a2=0 a3=0 items=0 ppid=2935 pid=5357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.102424 kernel: audit: type=1300 audit(1781305378.069:723): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc3854940 a2=0 a3=0 items=0 ppid=2935 pid=5357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.069000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:58.102941 systemd-networkd[2176]: vethcd88c2b: Gained IPv6LL Jun 12 23:02:58.114852 kernel: audit: type=1327 audit(1781305378.069:723): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:58.116329 systemd-networkd[2176]: vethcd88c2b: Link DOWN Jun 12 23:02:58.123998 kernel: docker0: port 1(vethcd88c2b) entered disabled state Jun 12 23:02:58.124055 kernel: vethcd88c2b (unregistering): left allmulticast mode Jun 12 23:02:58.127317 kernel: vethcd88c2b (unregistering): left promiscuous mode Jun 12 23:02:58.130661 kernel: docker0: port 1(vethcd88c2b) entered disabled state Jun 12 23:02:58.115000 audit: ANOM_PROMISCUOUS dev=vethcd88c2b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:58.131896 kernel: audit: type=1700 audit(1781305378.115:724): dev=vethcd88c2b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:58.115000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c29b140 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.115000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:58.159639 systemd[1]: run-docker-netns-a6360fa982fd.mount: Deactivated successfully. Jun 12 23:02:58.173611 kernel: audit: type=1300 audit(1781305378.115:724): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c29b140 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.173655 kernel: audit: type=1327 audit(1781305378.115:724): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:58.177843 systemd[1]: var-lib-docker-overlay2-ec4e6b65740146fcaa1dfeabb88a8d9ee5308e931b4c53cd2ac0f2f049ecc390-merged.mount: Deactivated successfully. Jun 12 23:02:58.185000 audit: BPF prog-id=164 op=UNLOAD Jun 12 23:02:58.185000 audit: BPF prog-id=168 op=UNLOAD Jun 12 23:02:58.193978 kernel: audit: type=1334 audit(1781305378.185:725): prog-id=164 op=UNLOAD Jun 12 23:02:58.194046 kernel: audit: type=1334 audit(1781305378.185:726): prog-id=168 op=UNLOAD Jun 12 23:02:58.306821 systemd[1]: var-lib-docker-overlay2-449f222b53cacdb16dba2bc45cb2adb9ee2248de781303ddde2f8d3d52ff9049\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:58.368468 containerd[2455]: time="2026-06-12T23:02:58.368429180Z" level=info msg="connecting to shim bfefbbe357d142814fc51dc7b507d5f9ae9e366f5c143e1d93a11f34c99ac439" address="unix:///run/containerd/s/97784100e4341f032fdeb2fbbcd52075c1bc827c2d41839613d94ddc8caac8f2" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:58.384920 systemd[1]: Started docker-bfefbbe357d142814fc51dc7b507d5f9ae9e366f5c143e1d93a11f34c99ac439.scope - libcontainer container bfefbbe357d142814fc51dc7b507d5f9ae9e366f5c143e1d93a11f34c99ac439. Jun 12 23:02:58.391000 audit: BPF prog-id=169 op=LOAD Jun 12 23:02:58.391000 audit: BPF prog-id=170 op=LOAD Jun 12 23:02:58.401182 kernel: audit: type=1334 audit(1781305378.391:727): prog-id=169 op=LOAD Jun 12 23:02:58.391000 audit[5385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=651aef9a1f80 a2=98 a3=0 items=0 ppid=5374 pid=5385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62666566626265333537643134323831346663353164633762 Jun 12 23:02:58.395000 audit: BPF prog-id=170 op=UNLOAD Jun 12 23:02:58.395000 audit[5385]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5374 pid=5385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62666566626265333537643134323831346663353164633762 Jun 12 23:02:58.395000 audit: BPF prog-id=171 op=LOAD Jun 12 23:02:58.395000 audit[5385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=651aef9a2258 a2=98 a3=0 items=0 ppid=5374 pid=5385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62666566626265333537643134323831346663353164633762 Jun 12 23:02:58.396000 audit: BPF prog-id=172 op=LOAD Jun 12 23:02:58.396000 audit[5385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=651aef9a1f98 a2=98 a3=0 items=0 ppid=5374 pid=5385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62666566626265333537643134323831346663353164633762 Jun 12 23:02:58.396000 audit: BPF prog-id=172 op=UNLOAD Jun 12 23:02:58.396000 audit[5385]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5374 pid=5385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62666566626265333537643134323831346663353164633762 Jun 12 23:02:58.396000 audit: BPF prog-id=171 op=UNLOAD Jun 12 23:02:58.396000 audit[5385]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5374 pid=5385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62666566626265333537643134323831346663353164633762 Jun 12 23:02:58.396000 audit: BPF prog-id=173 op=LOAD Jun 12 23:02:58.396000 audit[5385]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=651aef9a24a8 a2=98 a3=0 items=0 ppid=5374 pid=5385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62666566626265333537643134323831346663353164633762 Jun 12 23:02:58.402020 kernel: audit: type=1334 audit(1781305378.391:728): prog-id=170 op=LOAD Jun 12 23:02:58.413236 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:58.424713 kernel: docker0: port 1(vethe5b1f8b) entered blocking state Jun 12 23:02:58.424768 kernel: docker0: port 1(vethe5b1f8b) entered disabled state Jun 12 23:02:58.424798 kernel: vethe5b1f8b: entered allmulticast mode Jun 12 23:02:58.412000 audit: ANOM_PROMISCUOUS dev=vethe5b1f8b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:58.429798 kernel: vethe5b1f8b: entered promiscuous mode Jun 12 23:02:58.412000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beabb60 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.412000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:58.430000 audit[5406]: NETFILTER_CFG table=raw:87 family=2 entries=1 op=nft_register_rule pid=5406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:58.430000 audit[5406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff5170a40 a2=0 a3=0 items=0 ppid=2935 pid=5406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:58.430000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:58.431908 systemd-networkd[2176]: vethe5b1f8b: Link UP Jun 12 23:02:58.446792 kernel: eth0: renamed from veth0d9aeef Jun 12 23:02:58.454324 kernel: docker0: port 1(vethe5b1f8b) entered blocking state Jun 12 23:02:58.454384 kernel: docker0: port 1(vethe5b1f8b) entered forwarding state Jun 12 23:02:58.454669 systemd-networkd[2176]: vethe5b1f8b: Gained carrier Jun 12 23:02:58.454943 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:02:59.478482 systemd[1]: docker-bfefbbe357d142814fc51dc7b507d5f9ae9e366f5c143e1d93a11f34c99ac439.scope: Deactivated successfully. Jun 12 23:02:59.490458 dockerd[2935]: time="2026-06-12T23:02:59.490249839Z" level=info msg="ignoring event" container=bfefbbe357d142814fc51dc7b507d5f9ae9e366f5c143e1d93a11f34c99ac439 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:02:59.491471 containerd[2455]: time="2026-06-12T23:02:59.491309912Z" level=info msg="shim disconnected" id=bfefbbe357d142814fc51dc7b507d5f9ae9e366f5c143e1d93a11f34c99ac439 namespace=moby Jun 12 23:02:59.491471 containerd[2455]: time="2026-06-12T23:02:59.491340559Z" level=info msg="cleaning up after shim disconnected" id=bfefbbe357d142814fc51dc7b507d5f9ae9e366f5c143e1d93a11f34c99ac439 namespace=moby Jun 12 23:02:59.491471 containerd[2455]: time="2026-06-12T23:02:59.491364213Z" level=info msg="cleaning up dead shim" id=bfefbbe357d142814fc51dc7b507d5f9ae9e366f5c143e1d93a11f34c99ac439 namespace=moby Jun 12 23:02:59.513975 systemd-networkd[2176]: vethe5b1f8b: Lost carrier Jun 12 23:02:59.516946 kernel: docker0: port 1(vethe5b1f8b) entered disabled state Jun 12 23:02:59.517000 kernel: veth0d9aeef: renamed from eth0 Jun 12 23:02:59.527000 audit[5436]: NETFILTER_CFG table=raw:88 family=2 entries=1 op=nft_unregister_rule pid=5436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:59.527000 audit[5436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe4eaf0b0 a2=0 a3=0 items=0 ppid=2935 pid=5436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.527000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:59.531096 systemd-networkd[2176]: vethe5b1f8b: Link DOWN Jun 12 23:02:59.538838 kernel: docker0: port 1(vethe5b1f8b) entered disabled state Jun 12 23:02:59.538894 kernel: vethe5b1f8b (unregistering): left allmulticast mode Jun 12 23:02:59.542182 kernel: vethe5b1f8b (unregistering): left promiscuous mode Jun 12 23:02:59.530000 audit: ANOM_PROMISCUOUS dev=vethe5b1f8b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:59.545785 kernel: docker0: port 1(vethe5b1f8b) entered disabled state Jun 12 23:02:59.530000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bafa420 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.530000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:59.556802 systemd[1]: run-docker-netns-a3a21cc3565e.mount: Deactivated successfully. Jun 12 23:02:59.563707 systemd[1]: var-lib-docker-overlay2-449f222b53cacdb16dba2bc45cb2adb9ee2248de781303ddde2f8d3d52ff9049-merged.mount: Deactivated successfully. Jun 12 23:02:59.573000 audit: BPF prog-id=169 op=UNLOAD Jun 12 23:02:59.573000 audit: BPF prog-id=173 op=UNLOAD Jun 12 23:02:59.643836 systemd[1]: var-lib-docker-overlay2-df13210816badb27c4096dc8acf7091f8a45350b7ca90998b957069acb3eaf0b\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:02:59.711941 containerd[2455]: time="2026-06-12T23:02:59.711893658Z" level=info msg="connecting to shim ee9e5e2d2051e72bc1a47989c3c88a2303c2539cbf03b378b763c49de222c841" address="unix:///run/containerd/s/c078851b8a5513301329650aad35fcc7cb90c290f62b308615e202bee30f230c" namespace=moby protocol=ttrpc version=3 Jun 12 23:02:59.728917 systemd[1]: Started docker-ee9e5e2d2051e72bc1a47989c3c88a2303c2539cbf03b378b763c49de222c841.scope - libcontainer container ee9e5e2d2051e72bc1a47989c3c88a2303c2539cbf03b378b763c49de222c841. Jun 12 23:02:59.736000 audit: BPF prog-id=174 op=LOAD Jun 12 23:02:59.736000 audit: BPF prog-id=175 op=LOAD Jun 12 23:02:59.736000 audit[5465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=26f72b195f80 a2=98 a3=0 items=0 ppid=5453 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653965356532643230353165373262633161343739383963 Jun 12 23:02:59.736000 audit: BPF prog-id=175 op=UNLOAD Jun 12 23:02:59.736000 audit[5465]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5453 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653965356532643230353165373262633161343739383963 Jun 12 23:02:59.737000 audit: BPF prog-id=176 op=LOAD Jun 12 23:02:59.737000 audit[5465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=26f72b196258 a2=98 a3=0 items=0 ppid=5453 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653965356532643230353165373262633161343739383963 Jun 12 23:02:59.737000 audit: BPF prog-id=177 op=LOAD Jun 12 23:02:59.737000 audit[5465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=26f72b195f98 a2=98 a3=0 items=0 ppid=5453 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653965356532643230353165373262633161343739383963 Jun 12 23:02:59.737000 audit: BPF prog-id=177 op=UNLOAD Jun 12 23:02:59.737000 audit[5465]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5453 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653965356532643230353165373262633161343739383963 Jun 12 23:02:59.737000 audit: BPF prog-id=176 op=UNLOAD Jun 12 23:02:59.737000 audit[5465]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5453 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653965356532643230353165373262633161343739383963 Jun 12 23:02:59.737000 audit: BPF prog-id=178 op=LOAD Jun 12 23:02:59.737000 audit[5465]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=26f72b1964a8 a2=98 a3=0 items=0 ppid=5453 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65653965356532643230353165373262633161343739383963 Jun 12 23:02:59.754995 kernel: docker0: port 1(vethc785fef) entered blocking state Jun 12 23:02:59.755057 kernel: docker0: port 1(vethc785fef) entered disabled state Jun 12 23:02:59.758266 kernel: vethc785fef: entered allmulticast mode Jun 12 23:02:59.761005 kernel: vethc785fef: entered promiscuous mode Jun 12 23:02:59.747000 audit: ANOM_PROMISCUOUS dev=vethc785fef prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:02:59.747000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52ee70 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.747000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:02:59.761699 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:02:59.763000 audit[5486]: NETFILTER_CFG table=raw:89 family=2 entries=1 op=nft_register_rule pid=5486 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:02:59.763000 audit[5486]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffec9b5a40 a2=0 a3=0 items=0 ppid=2935 pid=5486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:02:59.763000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:02:59.764630 systemd-networkd[2176]: vethc785fef: Link UP Jun 12 23:02:59.782803 kernel: eth0: renamed from veth8a25ce7 Jun 12 23:02:59.782884 kernel: docker0: port 1(vethc785fef) entered blocking state Jun 12 23:02:59.789675 kernel: docker0: port 1(vethc785fef) entered forwarding state Jun 12 23:02:59.789995 systemd-networkd[2176]: vethc785fef: Gained carrier Jun 12 23:02:59.790176 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:00.815151 systemd[1]: docker-ee9e5e2d2051e72bc1a47989c3c88a2303c2539cbf03b378b763c49de222c841.scope: Deactivated successfully. Jun 12 23:03:00.828818 dockerd[2935]: time="2026-06-12T23:03:00.828711188Z" level=info msg="ignoring event" container=ee9e5e2d2051e72bc1a47989c3c88a2303c2539cbf03b378b763c49de222c841 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:00.829358 containerd[2455]: time="2026-06-12T23:03:00.829290758Z" level=info msg="shim disconnected" id=ee9e5e2d2051e72bc1a47989c3c88a2303c2539cbf03b378b763c49de222c841 namespace=moby Jun 12 23:03:00.829358 containerd[2455]: time="2026-06-12T23:03:00.829316061Z" level=info msg="cleaning up after shim disconnected" id=ee9e5e2d2051e72bc1a47989c3c88a2303c2539cbf03b378b763c49de222c841 namespace=moby Jun 12 23:03:00.829358 containerd[2455]: time="2026-06-12T23:03:00.829340068Z" level=info msg="cleaning up dead shim" id=ee9e5e2d2051e72bc1a47989c3c88a2303c2539cbf03b378b763c49de222c841 namespace=moby Jun 12 23:03:00.847794 kernel: veth8a25ce7: renamed from eth0 Jun 12 23:03:00.852148 systemd-networkd[2176]: vethc785fef: Lost carrier Jun 12 23:03:00.852855 kernel: docker0: port 1(vethc785fef) entered disabled state Jun 12 23:03:00.869000 audit[5517]: NETFILTER_CFG table=raw:90 family=2 entries=1 op=nft_unregister_rule pid=5517 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:00.869000 audit[5517]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc834ec00 a2=0 a3=0 items=0 ppid=2935 pid=5517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:00.869000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:00.877211 systemd-networkd[2176]: vethc785fef: Link DOWN Jun 12 23:03:00.882792 kernel: docker0: port 1(vethc785fef) entered disabled state Jun 12 23:03:00.891280 kernel: vethc785fef (unregistering): left allmulticast mode Jun 12 23:03:00.891346 kernel: vethc785fef (unregistering): left promiscuous mode Jun 12 23:03:00.876000 audit: ANOM_PROMISCUOUS dev=vethc785fef prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:00.896110 kernel: docker0: port 1(vethc785fef) entered disabled state Jun 12 23:03:00.876000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b23de00 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:00.876000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:00.911909 systemd[1]: run-docker-netns-d9053b65f76e.mount: Deactivated successfully. Jun 12 23:03:00.914998 systemd[1]: var-lib-docker-overlay2-df13210816badb27c4096dc8acf7091f8a45350b7ca90998b957069acb3eaf0b-merged.mount: Deactivated successfully. Jun 12 23:03:00.925000 audit: BPF prog-id=174 op=UNLOAD Jun 12 23:03:00.925000 audit: BPF prog-id=178 op=UNLOAD Jun 12 23:03:00.991122 systemd[1]: var-lib-docker-overlay2-cd0a9d5b7d02c497981131743c9dad1c4c95845818e397995f831e304fcb4853\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:01.056807 containerd[2455]: time="2026-06-12T23:03:01.056676213Z" level=info msg="connecting to shim 8854fe2721132c3f6d6b5bc277ab0fa7d8e040a066b5a37356b03b81c729c5f4" address="unix:///run/containerd/s/eeb8ca35f9b1864145e8d6b611e67708a9381a2da557c8bbd089db2aeb9a6084" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:01.073924 systemd[1]: Started docker-8854fe2721132c3f6d6b5bc277ab0fa7d8e040a066b5a37356b03b81c729c5f4.scope - libcontainer container 8854fe2721132c3f6d6b5bc277ab0fa7d8e040a066b5a37356b03b81c729c5f4. Jun 12 23:03:01.081000 audit: BPF prog-id=179 op=LOAD Jun 12 23:03:01.081000 audit: BPF prog-id=180 op=LOAD Jun 12 23:03:01.081000 audit[5546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7d6ec4c8df80 a2=98 a3=0 items=0 ppid=5534 pid=5546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:01.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38383534666532373231313332633366366436623562633237 Jun 12 23:03:01.081000 audit: BPF prog-id=180 op=UNLOAD Jun 12 23:03:01.081000 audit[5546]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5534 pid=5546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:01.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38383534666532373231313332633366366436623562633237 Jun 12 23:03:01.081000 audit: BPF prog-id=181 op=LOAD Jun 12 23:03:01.081000 audit[5546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7d6ec4c8e258 a2=98 a3=0 items=0 ppid=5534 pid=5546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:01.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38383534666532373231313332633366366436623562633237 Jun 12 23:03:01.082000 audit: BPF prog-id=182 op=LOAD Jun 12 23:03:01.082000 audit[5546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7d6ec4c8df98 a2=98 a3=0 items=0 ppid=5534 pid=5546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:01.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38383534666532373231313332633366366436623562633237 Jun 12 23:03:01.082000 audit: BPF prog-id=182 op=UNLOAD Jun 12 23:03:01.082000 audit[5546]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5534 pid=5546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:01.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38383534666532373231313332633366366436623562633237 Jun 12 23:03:01.082000 audit: BPF prog-id=181 op=UNLOAD Jun 12 23:03:01.082000 audit[5546]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5534 pid=5546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:01.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38383534666532373231313332633366366436623562633237 Jun 12 23:03:01.082000 audit: BPF prog-id=183 op=LOAD Jun 12 23:03:01.082000 audit[5546]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7d6ec4c8e4a8 a2=98 a3=0 items=0 ppid=5534 pid=5546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:01.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38383534666532373231313332633366366436623562633237 Jun 12 23:03:01.095984 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:01.103768 kernel: docker0: port 1(vethd19fdb7) entered blocking state Jun 12 23:03:01.103857 kernel: docker0: port 1(vethd19fdb7) entered disabled state Jun 12 23:03:01.106924 kernel: vethd19fdb7: entered allmulticast mode Jun 12 23:03:01.109560 kernel: vethd19fdb7: entered promiscuous mode Jun 12 23:03:01.095000 audit: ANOM_PROMISCUOUS dev=vethd19fdb7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:01.095000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b241a40 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:01.095000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:01.110000 audit[5567]: NETFILTER_CFG table=raw:91 family=2 entries=1 op=nft_register_rule pid=5567 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:01.110000 audit[5567]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff8efde70 a2=0 a3=0 items=0 ppid=2935 pid=5567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:01.110000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:01.111946 systemd-networkd[2176]: vethd19fdb7: Link UP Jun 12 23:03:01.133917 kernel: eth0: renamed from veth0c7acde Jun 12 23:03:01.133999 kernel: docker0: port 1(vethd19fdb7) entered blocking state Jun 12 23:03:01.133981 systemd-networkd[2176]: vethd19fdb7: Gained carrier Jun 12 23:03:01.134079 kernel: docker0: port 1(vethd19fdb7) entered forwarding state Jun 12 23:03:01.134545 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:02.159373 systemd[1]: docker-8854fe2721132c3f6d6b5bc277ab0fa7d8e040a066b5a37356b03b81c729c5f4.scope: Deactivated successfully. Jun 12 23:03:02.171149 dockerd[2935]: time="2026-06-12T23:03:02.171056198Z" level=info msg="ignoring event" container=8854fe2721132c3f6d6b5bc277ab0fa7d8e040a066b5a37356b03b81c729c5f4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:02.171440 containerd[2455]: time="2026-06-12T23:03:02.171178528Z" level=info msg="shim disconnected" id=8854fe2721132c3f6d6b5bc277ab0fa7d8e040a066b5a37356b03b81c729c5f4 namespace=moby Jun 12 23:03:02.171440 containerd[2455]: time="2026-06-12T23:03:02.171203614Z" level=info msg="cleaning up after shim disconnected" id=8854fe2721132c3f6d6b5bc277ab0fa7d8e040a066b5a37356b03b81c729c5f4 namespace=moby Jun 12 23:03:02.171440 containerd[2455]: time="2026-06-12T23:03:02.171210494Z" level=info msg="cleaning up dead shim" id=8854fe2721132c3f6d6b5bc277ab0fa7d8e040a066b5a37356b03b81c729c5f4 namespace=moby Jun 12 23:03:02.199578 kernel: veth0c7acde: renamed from eth0 Jun 12 23:03:02.199701 kernel: docker0: port 1(vethd19fdb7) entered disabled state Jun 12 23:03:02.199679 systemd-networkd[2176]: vethd19fdb7: Lost carrier Jun 12 23:03:02.218000 audit[5598]: NETFILTER_CFG table=raw:92 family=2 entries=1 op=nft_unregister_rule pid=5598 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:02.218000 audit[5598]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffff43eb50 a2=0 a3=0 items=0 ppid=2935 pid=5598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.218000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:02.227287 systemd-networkd[2176]: vethd19fdb7: Link DOWN Jun 12 23:03:02.234882 kernel: docker0: port 1(vethd19fdb7) entered disabled state Jun 12 23:03:02.234938 kernel: vethd19fdb7 (unregistering): left allmulticast mode Jun 12 23:03:02.238718 kernel: vethd19fdb7 (unregistering): left promiscuous mode Jun 12 23:03:02.226000 audit: ANOM_PROMISCUOUS dev=vethd19fdb7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:02.242726 kernel: docker0: port 1(vethd19fdb7) entered disabled state Jun 12 23:03:02.226000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f68c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.226000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:02.252707 systemd[1]: run-docker-netns-85fd9d97d041.mount: Deactivated successfully. Jun 12 23:03:02.256449 systemd[1]: var-lib-docker-overlay2-cd0a9d5b7d02c497981131743c9dad1c4c95845818e397995f831e304fcb4853-merged.mount: Deactivated successfully. Jun 12 23:03:02.264000 audit: BPF prog-id=179 op=UNLOAD Jun 12 23:03:02.264000 audit: BPF prog-id=183 op=UNLOAD Jun 12 23:03:02.353123 systemd[1]: var-lib-docker-overlay2-4fd8252ee327ac7863682bb6966428265a13221ab5cbe0ab707de3c95d920cff\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:02.434580 containerd[2455]: time="2026-06-12T23:03:02.434444809Z" level=info msg="connecting to shim f037431e6073d0ef5b69ff9de44ec8bf9c0190dd823a6e1ef8e72aaed0bd3442" address="unix:///run/containerd/s/5e13c197cebc3c92112f3280e4c20a433b42663c0d86afed69ef3c8a09141a18" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:02.451938 systemd[1]: Started docker-f037431e6073d0ef5b69ff9de44ec8bf9c0190dd823a6e1ef8e72aaed0bd3442.scope - libcontainer container f037431e6073d0ef5b69ff9de44ec8bf9c0190dd823a6e1ef8e72aaed0bd3442. Jun 12 23:03:02.458000 audit: BPF prog-id=184 op=LOAD Jun 12 23:03:02.459000 audit: BPF prog-id=185 op=LOAD Jun 12 23:03:02.459000 audit[5627]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=21ab3a157f80 a2=98 a3=0 items=0 ppid=5616 pid=5627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303337343331653630373364306566356236396666396465 Jun 12 23:03:02.459000 audit: BPF prog-id=185 op=UNLOAD Jun 12 23:03:02.459000 audit[5627]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5616 pid=5627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303337343331653630373364306566356236396666396465 Jun 12 23:03:02.459000 audit: BPF prog-id=186 op=LOAD Jun 12 23:03:02.459000 audit[5627]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=21ab3a158258 a2=98 a3=0 items=0 ppid=5616 pid=5627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303337343331653630373364306566356236396666396465 Jun 12 23:03:02.459000 audit: BPF prog-id=187 op=LOAD Jun 12 23:03:02.459000 audit[5627]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=21ab3a157f98 a2=98 a3=0 items=0 ppid=5616 pid=5627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303337343331653630373364306566356236396666396465 Jun 12 23:03:02.459000 audit: BPF prog-id=187 op=UNLOAD Jun 12 23:03:02.459000 audit[5627]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5616 pid=5627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303337343331653630373364306566356236396666396465 Jun 12 23:03:02.459000 audit: BPF prog-id=186 op=UNLOAD Jun 12 23:03:02.459000 audit[5627]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5616 pid=5627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303337343331653630373364306566356236396666396465 Jun 12 23:03:02.459000 audit: BPF prog-id=188 op=LOAD Jun 12 23:03:02.459000 audit[5627]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=21ab3a1584a8 a2=98 a3=0 items=0 ppid=5616 pid=5627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303337343331653630373364306566356236396666396465 Jun 12 23:03:02.485799 kernel: docker0: port 1(vethbbe9c33) entered blocking state Jun 12 23:03:02.485917 kernel: docker0: port 1(vethbbe9c33) entered disabled state Jun 12 23:03:02.485937 kernel: vethbbe9c33: entered allmulticast mode Jun 12 23:03:02.489131 kernel: vethbbe9c33: entered promiscuous mode Jun 12 23:03:02.472000 audit: ANOM_PROMISCUOUS dev=vethbbe9c33 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:02.472000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f80f0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.472000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:02.490176 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:02.490000 audit[5649]: NETFILTER_CFG table=raw:93 family=2 entries=1 op=nft_register_rule pid=5649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:02.490000 audit[5649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe740a840 a2=0 a3=0 items=0 ppid=2935 pid=5649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:02.490000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:02.491457 systemd-networkd[2176]: vethbbe9c33: Link UP Jun 12 23:03:02.507804 kernel: eth0: renamed from veth6aac58e Jun 12 23:03:02.515492 kernel: docker0: port 1(vethbbe9c33) entered blocking state Jun 12 23:03:02.515548 kernel: docker0: port 1(vethbbe9c33) entered forwarding state Jun 12 23:03:02.515820 systemd-networkd[2176]: vethbbe9c33: Gained carrier Jun 12 23:03:02.516671 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:03.544343 systemd[1]: docker-f037431e6073d0ef5b69ff9de44ec8bf9c0190dd823a6e1ef8e72aaed0bd3442.scope: Deactivated successfully. Jun 12 23:03:03.557387 dockerd[2935]: time="2026-06-12T23:03:03.557332963Z" level=info msg="ignoring event" container=f037431e6073d0ef5b69ff9de44ec8bf9c0190dd823a6e1ef8e72aaed0bd3442 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:03.557920 containerd[2455]: time="2026-06-12T23:03:03.557892623Z" level=info msg="shim disconnected" id=f037431e6073d0ef5b69ff9de44ec8bf9c0190dd823a6e1ef8e72aaed0bd3442 namespace=moby Jun 12 23:03:03.558696 containerd[2455]: time="2026-06-12T23:03:03.558563020Z" level=info msg="cleaning up after shim disconnected" id=f037431e6073d0ef5b69ff9de44ec8bf9c0190dd823a6e1ef8e72aaed0bd3442 namespace=moby Jun 12 23:03:03.558696 containerd[2455]: time="2026-06-12T23:03:03.558582803Z" level=info msg="cleaning up dead shim" id=f037431e6073d0ef5b69ff9de44ec8bf9c0190dd823a6e1ef8e72aaed0bd3442 namespace=moby Jun 12 23:03:03.580795 kernel: veth6aac58e: renamed from eth0 Jun 12 23:03:03.580875 kernel: docker0: port 1(vethbbe9c33) entered disabled state Jun 12 23:03:03.584236 systemd-networkd[2176]: vethbbe9c33: Lost carrier Jun 12 23:03:03.605000 audit[5681]: NETFILTER_CFG table=raw:94 family=2 entries=1 op=nft_unregister_rule pid=5681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:03.609911 kernel: kauditd_printk_skb: 134 callbacks suppressed Jun 12 23:03:03.609948 kernel: audit: type=1325 audit(1781305383.605:779): table=raw:94 family=2 entries=1 op=nft_unregister_rule pid=5681 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:03.605000 audit[5681]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd5dfcd30 a2=0 a3=0 items=0 ppid=2935 pid=5681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.634374 kernel: audit: type=1300 audit(1781305383.605:779): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd5dfcd30 a2=0 a3=0 items=0 ppid=2935 pid=5681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.635278 systemd-networkd[2176]: vethbbe9c33: Link DOWN Jun 12 23:03:03.605000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:03.639298 kernel: docker0: port 1(vethbbe9c33) entered disabled state Jun 12 23:03:03.639357 kernel: audit: type=1327 audit(1781305383.605:779): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:03.653925 kernel: vethbbe9c33 (unregistering): left allmulticast mode Jun 12 23:03:03.657458 kernel: vethbbe9c33 (unregistering): left promiscuous mode Jun 12 23:03:03.634000 audit: ANOM_PROMISCUOUS dev=vethbbe9c33 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:03.660945 kernel: docker0: port 1(vethbbe9c33) entered disabled state Jun 12 23:03:03.660971 kernel: audit: type=1700 audit(1781305383.634:780): dev=vethbbe9c33 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:03.634000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb15c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.634000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:03.705605 kernel: audit: type=1300 audit(1781305383.634:780): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb15c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.705712 kernel: audit: type=1327 audit(1781305383.634:780): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:03.706337 systemd[1]: run-docker-netns-769badf3edae.mount: Deactivated successfully. Jun 12 23:03:03.712183 systemd[1]: var-lib-docker-overlay2-4fd8252ee327ac7863682bb6966428265a13221ab5cbe0ab707de3c95d920cff-merged.mount: Deactivated successfully. Jun 12 23:03:03.717000 audit: BPF prog-id=184 op=UNLOAD Jun 12 23:03:03.717000 audit: BPF prog-id=188 op=UNLOAD Jun 12 23:03:03.726717 kernel: audit: type=1334 audit(1781305383.717:781): prog-id=184 op=UNLOAD Jun 12 23:03:03.740930 kernel: audit: type=1334 audit(1781305383.717:782): prog-id=188 op=UNLOAD Jun 12 23:03:03.907715 containerd[2455]: time="2026-06-12T23:03:03.907247355Z" level=info msg="connecting to shim d190c9b57117c5594616945d988840ce50505c6bff981cae395647f706637cee" address="unix:///run/containerd/s/cc2cc4b391896f0a5db93b1b9d59ba34ba96e01afaddce4efa003aad8d1381dc" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:03.924931 systemd[1]: Started docker-d190c9b57117c5594616945d988840ce50505c6bff981cae395647f706637cee.scope - libcontainer container d190c9b57117c5594616945d988840ce50505c6bff981cae395647f706637cee. Jun 12 23:03:03.932000 audit: BPF prog-id=189 op=LOAD Jun 12 23:03:03.932000 audit: BPF prog-id=190 op=LOAD Jun 12 23:03:03.941094 kernel: audit: type=1334 audit(1781305383.932:783): prog-id=189 op=LOAD Jun 12 23:03:03.941166 kernel: audit: type=1334 audit(1781305383.932:784): prog-id=190 op=LOAD Jun 12 23:03:03.932000 audit[5709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5a7344171f80 a2=98 a3=0 items=0 ppid=5699 pid=5709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313930633962353731313763353539343631363934356439 Jun 12 23:03:03.936000 audit: BPF prog-id=190 op=UNLOAD Jun 12 23:03:03.936000 audit[5709]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5699 pid=5709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313930633962353731313763353539343631363934356439 Jun 12 23:03:03.936000 audit: BPF prog-id=191 op=LOAD Jun 12 23:03:03.936000 audit[5709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5a7344172258 a2=98 a3=0 items=0 ppid=5699 pid=5709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313930633962353731313763353539343631363934356439 Jun 12 23:03:03.936000 audit: BPF prog-id=192 op=LOAD Jun 12 23:03:03.936000 audit[5709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=5a7344171f98 a2=98 a3=0 items=0 ppid=5699 pid=5709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313930633962353731313763353539343631363934356439 Jun 12 23:03:03.936000 audit: BPF prog-id=192 op=UNLOAD Jun 12 23:03:03.936000 audit[5709]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5699 pid=5709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313930633962353731313763353539343631363934356439 Jun 12 23:03:03.936000 audit: BPF prog-id=191 op=UNLOAD Jun 12 23:03:03.936000 audit[5709]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5699 pid=5709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313930633962353731313763353539343631363934356439 Jun 12 23:03:03.936000 audit: BPF prog-id=193 op=LOAD Jun 12 23:03:03.936000 audit[5709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5a73441724a8 a2=98 a3=0 items=0 ppid=5699 pid=5709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.936000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64313930633962353731313763353539343631363934356439 Jun 12 23:03:03.960172 kernel: docker0: port 1(vethf18a45b) entered blocking state Jun 12 23:03:03.960240 kernel: docker0: port 1(vethf18a45b) entered disabled state Jun 12 23:03:03.962986 kernel: vethf18a45b: entered allmulticast mode Jun 12 23:03:03.965744 kernel: vethf18a45b: entered promiscuous mode Jun 12 23:03:03.952000 audit: ANOM_PROMISCUOUS dev=vethf18a45b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:03.952000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f9440 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.952000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:03.966383 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:03.967000 audit[5730]: NETFILTER_CFG table=raw:95 family=2 entries=1 op=nft_register_rule pid=5730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:03.967000 audit[5730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd4dba1d0 a2=0 a3=0 items=0 ppid=2935 pid=5730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:03.967000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:03.968976 systemd-networkd[2176]: vethf18a45b: Link UP Jun 12 23:03:03.989923 kernel: eth0: renamed from veth32a3c7c Jun 12 23:03:03.990023 kernel: docker0: port 1(vethf18a45b) entered blocking state Jun 12 23:03:03.990038 kernel: docker0: port 1(vethf18a45b) entered forwarding state Jun 12 23:03:03.994152 systemd-networkd[2176]: vethf18a45b: Gained carrier Jun 12 23:03:03.994761 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:05.018425 systemd[1]: docker-d190c9b57117c5594616945d988840ce50505c6bff981cae395647f706637cee.scope: Deactivated successfully. Jun 12 23:03:05.030791 dockerd[2935]: time="2026-06-12T23:03:05.030744531Z" level=info msg="ignoring event" container=d190c9b57117c5594616945d988840ce50505c6bff981cae395647f706637cee module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:05.031238 containerd[2455]: time="2026-06-12T23:03:05.031020228Z" level=info msg="shim disconnected" id=d190c9b57117c5594616945d988840ce50505c6bff981cae395647f706637cee namespace=moby Jun 12 23:03:05.031238 containerd[2455]: time="2026-06-12T23:03:05.031047459Z" level=info msg="cleaning up after shim disconnected" id=d190c9b57117c5594616945d988840ce50505c6bff981cae395647f706637cee namespace=moby Jun 12 23:03:05.031238 containerd[2455]: time="2026-06-12T23:03:05.031052435Z" level=info msg="cleaning up dead shim" id=d190c9b57117c5594616945d988840ce50505c6bff981cae395647f706637cee namespace=moby Jun 12 23:03:05.055786 kernel: veth32a3c7c: renamed from eth0 Jun 12 23:03:05.055880 kernel: docker0: port 1(vethf18a45b) entered disabled state Jun 12 23:03:05.057580 systemd-networkd[2176]: vethf18a45b: Lost carrier Jun 12 23:03:05.073000 audit[5763]: NETFILTER_CFG table=raw:96 family=2 entries=1 op=nft_unregister_rule pid=5763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:05.073000 audit[5763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc8333b00 a2=0 a3=0 items=0 ppid=2935 pid=5763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.073000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:05.081226 systemd-networkd[2176]: vethf18a45b: Link DOWN Jun 12 23:03:05.088394 kernel: docker0: port 1(vethf18a45b) entered disabled state Jun 12 23:03:05.088455 kernel: vethf18a45b (unregistering): left allmulticast mode Jun 12 23:03:05.092599 kernel: vethf18a45b (unregistering): left promiscuous mode Jun 12 23:03:05.080000 audit: ANOM_PROMISCUOUS dev=vethf18a45b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:05.096563 kernel: docker0: port 1(vethf18a45b) entered disabled state Jun 12 23:03:05.080000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bafa960 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.080000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:05.108844 systemd[1]: run-docker-netns-49a24f88925c.mount: Deactivated successfully. Jun 12 23:03:05.114387 systemd[1]: var-lib-docker-overlay2-4ff2a807414f7147d26e37beb2c609205f3bca3b2bbf7ffaaffcb67c650fec9e-merged.mount: Deactivated successfully. Jun 12 23:03:05.119000 audit: BPF prog-id=189 op=UNLOAD Jun 12 23:03:05.119000 audit: BPF prog-id=193 op=UNLOAD Jun 12 23:03:05.273733 containerd[2455]: time="2026-06-12T23:03:05.273255206Z" level=info msg="connecting to shim 62daecc1803f1e966a976c0bc91c5ac9e0e4adc704edcf1dfd422b1ebec022a3" address="unix:///run/containerd/s/8e25c338e8067dc273e1c501f0c06609dd3ec34e201f59632249f61914ad6f96" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:05.290917 systemd[1]: Started docker-62daecc1803f1e966a976c0bc91c5ac9e0e4adc704edcf1dfd422b1ebec022a3.scope - libcontainer container 62daecc1803f1e966a976c0bc91c5ac9e0e4adc704edcf1dfd422b1ebec022a3. Jun 12 23:03:05.298000 audit: BPF prog-id=194 op=LOAD Jun 12 23:03:05.298000 audit: BPF prog-id=195 op=LOAD Jun 12 23:03:05.298000 audit[5793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2ca5a05b7f80 a2=98 a3=0 items=0 ppid=5782 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326461656363313830336631653936366139373663306263 Jun 12 23:03:05.298000 audit: BPF prog-id=195 op=UNLOAD Jun 12 23:03:05.298000 audit[5793]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5782 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326461656363313830336631653936366139373663306263 Jun 12 23:03:05.299000 audit: BPF prog-id=196 op=LOAD Jun 12 23:03:05.299000 audit[5793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2ca5a05b8258 a2=98 a3=0 items=0 ppid=5782 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326461656363313830336631653936366139373663306263 Jun 12 23:03:05.299000 audit: BPF prog-id=197 op=LOAD Jun 12 23:03:05.299000 audit[5793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=2ca5a05b7f98 a2=98 a3=0 items=0 ppid=5782 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326461656363313830336631653936366139373663306263 Jun 12 23:03:05.299000 audit: BPF prog-id=197 op=UNLOAD Jun 12 23:03:05.299000 audit[5793]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=5782 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326461656363313830336631653936366139373663306263 Jun 12 23:03:05.299000 audit: BPF prog-id=196 op=UNLOAD Jun 12 23:03:05.299000 audit[5793]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5782 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326461656363313830336631653936366139373663306263 Jun 12 23:03:05.299000 audit: BPF prog-id=198 op=LOAD Jun 12 23:03:05.299000 audit[5793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=2ca5a05b84a8 a2=98 a3=0 items=0 ppid=5782 pid=5793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36326461656363313830336631653936366139373663306263 Jun 12 23:03:05.316603 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:05.320553 kernel: docker0: port 1(vethb152e66) entered blocking state Jun 12 23:03:05.320623 kernel: docker0: port 1(vethb152e66) entered disabled state Jun 12 23:03:05.323406 kernel: vethb152e66: entered allmulticast mode Jun 12 23:03:05.326287 kernel: vethb152e66: entered promiscuous mode Jun 12 23:03:05.311000 audit: ANOM_PROMISCUOUS dev=vethb152e66 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:05.311000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaaed0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.311000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:05.328000 audit[5814]: NETFILTER_CFG table=raw:97 family=2 entries=1 op=nft_register_rule pid=5814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:05.328000 audit[5814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd3219170 a2=0 a3=0 items=0 ppid=2935 pid=5814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:05.328000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:05.329622 systemd-networkd[2176]: vethb152e66: Link UP Jun 12 23:03:05.351838 kernel: eth0: renamed from vethdf9f4ec Jun 12 23:03:05.351921 kernel: docker0: port 1(vethb152e66) entered blocking state Jun 12 23:03:05.351940 kernel: docker0: port 1(vethb152e66) entered forwarding state Jun 12 23:03:05.354085 systemd-networkd[2176]: vethb152e66: Gained carrier Jun 12 23:03:05.354307 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:06.379760 systemd[1]: docker-62daecc1803f1e966a976c0bc91c5ac9e0e4adc704edcf1dfd422b1ebec022a3.scope: Deactivated successfully. Jun 12 23:03:06.393980 dockerd[2935]: time="2026-06-12T23:03:06.393878478Z" level=info msg="ignoring event" container=62daecc1803f1e966a976c0bc91c5ac9e0e4adc704edcf1dfd422b1ebec022a3 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:06.394272 containerd[2455]: time="2026-06-12T23:03:06.393938523Z" level=info msg="shim disconnected" id=62daecc1803f1e966a976c0bc91c5ac9e0e4adc704edcf1dfd422b1ebec022a3 namespace=moby Jun 12 23:03:06.394272 containerd[2455]: time="2026-06-12T23:03:06.393964961Z" level=info msg="cleaning up after shim disconnected" id=62daecc1803f1e966a976c0bc91c5ac9e0e4adc704edcf1dfd422b1ebec022a3 namespace=moby Jun 12 23:03:06.394272 containerd[2455]: time="2026-06-12T23:03:06.393971017Z" level=info msg="cleaning up dead shim" id=62daecc1803f1e966a976c0bc91c5ac9e0e4adc704edcf1dfd422b1ebec022a3 namespace=moby Jun 12 23:03:06.417114 kernel: vethdf9f4ec: renamed from eth0 Jun 12 23:03:06.417411 kernel: docker0: port 1(vethb152e66) entered disabled state Jun 12 23:03:06.417194 systemd-networkd[2176]: vethb152e66: Lost carrier Jun 12 23:03:06.440000 audit[5846]: NETFILTER_CFG table=raw:98 family=2 entries=1 op=nft_unregister_rule pid=5846 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:06.440000 audit[5846]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc044ea40 a2=0 a3=0 items=0 ppid=2935 pid=5846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.440000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:06.447215 systemd-networkd[2176]: vethb152e66: Link DOWN Jun 12 23:03:06.451807 kernel: docker0: port 1(vethb152e66) entered disabled state Jun 12 23:03:06.460111 kernel: vethb152e66 (unregistering): left allmulticast mode Jun 12 23:03:06.460183 kernel: vethb152e66 (unregistering): left promiscuous mode Jun 12 23:03:06.446000 audit: ANOM_PROMISCUOUS dev=vethb152e66 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:06.465952 kernel: docker0: port 1(vethb152e66) entered disabled state Jun 12 23:03:06.446000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8db7e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.446000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:06.473549 systemd[1]: run-docker-netns-bdf73474364c.mount: Deactivated successfully. Jun 12 23:03:06.480670 systemd[1]: var-lib-docker-overlay2-b68390ce8db89966ae7ccb250d174fcc1069cfef4f54d44ff84640b88248adef-merged.mount: Deactivated successfully. Jun 12 23:03:06.488000 audit: BPF prog-id=194 op=UNLOAD Jun 12 23:03:06.488000 audit: BPF prog-id=198 op=UNLOAD Jun 12 23:03:06.590679 systemd[1]: var-lib-docker-overlay2-54a34d0285691aa0273ab6fade7ff0857163af15783740e3402845afd3c0b706\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:06.657215 containerd[2455]: time="2026-06-12T23:03:06.657068924Z" level=info msg="connecting to shim 1922f3192646c0b42947e2e2e26222b82fdd0665eb643644f6de530f4aeb375b" address="unix:///run/containerd/s/38208033238aa40eac2812ae8fc724ef64b15d88bee6eba50e15a46dabfe4a9e" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:06.675102 systemd[1]: Started docker-1922f3192646c0b42947e2e2e26222b82fdd0665eb643644f6de530f4aeb375b.scope - libcontainer container 1922f3192646c0b42947e2e2e26222b82fdd0665eb643644f6de530f4aeb375b. Jun 12 23:03:06.682000 audit: BPF prog-id=199 op=LOAD Jun 12 23:03:06.682000 audit: BPF prog-id=200 op=LOAD Jun 12 23:03:06.682000 audit[5875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=29d41bbbff80 a2=98 a3=0 items=0 ppid=5864 pid=5875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393232663331393236343663306234323934376532653265 Jun 12 23:03:06.682000 audit: BPF prog-id=200 op=UNLOAD Jun 12 23:03:06.682000 audit[5875]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5864 pid=5875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.682000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393232663331393236343663306234323934376532653265 Jun 12 23:03:06.683000 audit: BPF prog-id=201 op=LOAD Jun 12 23:03:06.683000 audit[5875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=29d41bbc0258 a2=98 a3=0 items=0 ppid=5864 pid=5875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393232663331393236343663306234323934376532653265 Jun 12 23:03:06.683000 audit: BPF prog-id=202 op=LOAD Jun 12 23:03:06.683000 audit[5875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=29d41bbbff98 a2=98 a3=0 items=0 ppid=5864 pid=5875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393232663331393236343663306234323934376532653265 Jun 12 23:03:06.683000 audit: BPF prog-id=202 op=UNLOAD Jun 12 23:03:06.683000 audit[5875]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5864 pid=5875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393232663331393236343663306234323934376532653265 Jun 12 23:03:06.683000 audit: BPF prog-id=201 op=UNLOAD Jun 12 23:03:06.683000 audit[5875]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5864 pid=5875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393232663331393236343663306234323934376532653265 Jun 12 23:03:06.683000 audit: BPF prog-id=203 op=LOAD Jun 12 23:03:06.683000 audit[5875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=29d41bbc04a8 a2=98 a3=0 items=0 ppid=5864 pid=5875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.683000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31393232663331393236343663306234323934376532653265 Jun 12 23:03:06.698022 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:06.705290 kernel: docker0: port 1(veth9b213c3) entered blocking state Jun 12 23:03:06.705365 kernel: docker0: port 1(veth9b213c3) entered disabled state Jun 12 23:03:06.708071 kernel: veth9b213c3: entered allmulticast mode Jun 12 23:03:06.712550 kernel: veth9b213c3: entered promiscuous mode Jun 12 23:03:06.696000 audit: ANOM_PROMISCUOUS dev=veth9b213c3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:06.696000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52fd70 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.696000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:06.714000 audit[5896]: NETFILTER_CFG table=raw:99 family=2 entries=1 op=nft_register_rule pid=5896 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:06.714000 audit[5896]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe98821b0 a2=0 a3=0 items=0 ppid=2935 pid=5896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:06.714000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:06.716859 systemd-networkd[2176]: veth9b213c3: Link UP Jun 12 23:03:06.732803 kernel: eth0: renamed from vethe60b321 Jun 12 23:03:06.740677 kernel: docker0: port 1(veth9b213c3) entered blocking state Jun 12 23:03:06.740746 kernel: docker0: port 1(veth9b213c3) entered forwarding state Jun 12 23:03:06.741115 systemd-networkd[2176]: veth9b213c3: Gained carrier Jun 12 23:03:06.741328 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:06.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-19-10.0.0.35:22-43.160.253.60:54216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:06.994441 systemd[1]: Started sshd@24-19-10.0.0.35:22-43.160.253.60:54216.service - OpenSSH per-connection server daemon (43.160.253.60:54216). Jun 12 23:03:07.016191 sshd[5906]: Connection closed by 43.160.253.60 port 54216 [preauth] Jun 12 23:03:07.017307 systemd[1]: sshd@24-19-10.0.0.35:22-43.160.253.60:54216.service: Deactivated successfully. Jun 12 23:03:07.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-19-10.0.0.35:22-43.160.253.60:54216 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:07.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-20-10.0.0.35:22-43.160.253.60:54232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:07.156378 systemd[1]: Started sshd@25-20-10.0.0.35:22-43.160.253.60:54232.service - OpenSSH per-connection server daemon (43.160.253.60:54232). Jun 12 23:03:07.766247 systemd[1]: docker-1922f3192646c0b42947e2e2e26222b82fdd0665eb643644f6de530f4aeb375b.scope: Deactivated successfully. Jun 12 23:03:07.778316 containerd[2455]: time="2026-06-12T23:03:07.778236156Z" level=info msg="shim disconnected" id=1922f3192646c0b42947e2e2e26222b82fdd0665eb643644f6de530f4aeb375b namespace=moby Jun 12 23:03:07.778316 containerd[2455]: time="2026-06-12T23:03:07.778263419Z" level=info msg="cleaning up after shim disconnected" id=1922f3192646c0b42947e2e2e26222b82fdd0665eb643644f6de530f4aeb375b namespace=moby Jun 12 23:03:07.778316 containerd[2455]: time="2026-06-12T23:03:07.778270955Z" level=info msg="cleaning up dead shim" id=1922f3192646c0b42947e2e2e26222b82fdd0665eb643644f6de530f4aeb375b namespace=moby Jun 12 23:03:07.778763 dockerd[2935]: time="2026-06-12T23:03:07.778254187Z" level=info msg="ignoring event" container=1922f3192646c0b42947e2e2e26222b82fdd0665eb643644f6de530f4aeb375b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:07.800451 systemd-networkd[2176]: veth9b213c3: Lost carrier Jun 12 23:03:07.802024 kernel: docker0: port 1(veth9b213c3) entered disabled state Jun 12 23:03:07.802056 kernel: vethe60b321: renamed from eth0 Jun 12 23:03:07.816000 audit[5939]: NETFILTER_CFG table=raw:100 family=2 entries=1 op=nft_unregister_rule pid=5939 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:07.816000 audit[5939]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcff1a430 a2=0 a3=0 items=0 ppid=2935 pid=5939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:07.816000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:07.825823 sshd[5912]: Connection closed by authenticating user root 43.160.253.60 port 54232 [preauth] Jun 12 23:03:07.825000 audit[5912]: AUDIT1109 pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:07.827607 systemd-networkd[2176]: veth9b213c3: Link DOWN Jun 12 23:03:07.829429 systemd[1]: sshd@25-20-10.0.0.35:22-43.160.253.60:54232.service: Deactivated successfully. Jun 12 23:03:07.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-20-10.0.0.35:22-43.160.253.60:54232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:07.835274 kernel: docker0: port 1(veth9b213c3) entered disabled state Jun 12 23:03:07.835336 kernel: veth9b213c3 (unregistering): left allmulticast mode Jun 12 23:03:07.838709 kernel: veth9b213c3 (unregistering): left promiscuous mode Jun 12 23:03:07.825000 audit: ANOM_PROMISCUOUS dev=veth9b213c3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:07.842315 kernel: docker0: port 1(veth9b213c3) entered disabled state Jun 12 23:03:07.825000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe620 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:07.825000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:07.850609 systemd[1]: run-docker-netns-532028f8ecd9.mount: Deactivated successfully. Jun 12 23:03:07.855310 systemd[1]: var-lib-docker-overlay2-54a34d0285691aa0273ab6fade7ff0857163af15783740e3402845afd3c0b706-merged.mount: Deactivated successfully. Jun 12 23:03:07.862000 audit: BPF prog-id=199 op=UNLOAD Jun 12 23:03:07.862000 audit: BPF prog-id=203 op=UNLOAD Jun 12 23:03:07.967950 systemd[1]: var-lib-docker-overlay2-ab17d232aaea6c3e4ac68b2e25cff01b4b0100db50b3954318e1274aade22351-merged.mount: Deactivated successfully. Jun 12 23:03:07.996311 systemd[1]: Started sshd@26-21-10.0.0.35:22-43.160.253.60:54238.service - OpenSSH per-connection server daemon (43.160.253.60:54238). Jun 12 23:03:07.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-21-10.0.0.35:22-43.160.253.60:54238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:08.027284 containerd[2455]: time="2026-06-12T23:03:08.026886766Z" level=info msg="connecting to shim bb3dd6f672f9b07da29af1689ee480848a896ec9d4bd81baf314173ef23d1450" address="unix:///run/containerd/s/6d4530e2c0d0ca80b93fcb2cbb9926775f0a43402f89fa84d65d41a184135381" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:08.047133 systemd[1]: Started docker-bb3dd6f672f9b07da29af1689ee480848a896ec9d4bd81baf314173ef23d1450.scope - libcontainer container bb3dd6f672f9b07da29af1689ee480848a896ec9d4bd81baf314173ef23d1450. Jun 12 23:03:08.055000 audit: BPF prog-id=204 op=LOAD Jun 12 23:03:08.055000 audit: BPF prog-id=205 op=LOAD Jun 12 23:03:08.055000 audit[5972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6cc84edb9f80 a2=98 a3=0 items=0 ppid=5961 pid=5972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:08.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623364643666363732663962303764613239616631363839 Jun 12 23:03:08.055000 audit: BPF prog-id=205 op=UNLOAD Jun 12 23:03:08.055000 audit[5972]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5961 pid=5972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:08.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623364643666363732663962303764613239616631363839 Jun 12 23:03:08.055000 audit: BPF prog-id=206 op=LOAD Jun 12 23:03:08.055000 audit[5972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6cc84edba258 a2=98 a3=0 items=0 ppid=5961 pid=5972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:08.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623364643666363732663962303764613239616631363839 Jun 12 23:03:08.055000 audit: BPF prog-id=207 op=LOAD Jun 12 23:03:08.055000 audit[5972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6cc84edb9f98 a2=98 a3=0 items=0 ppid=5961 pid=5972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:08.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623364643666363732663962303764613239616631363839 Jun 12 23:03:08.055000 audit: BPF prog-id=207 op=UNLOAD Jun 12 23:03:08.055000 audit[5972]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=5961 pid=5972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:08.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623364643666363732663962303764613239616631363839 Jun 12 23:03:08.055000 audit: BPF prog-id=206 op=UNLOAD Jun 12 23:03:08.055000 audit[5972]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5961 pid=5972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:08.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623364643666363732663962303764613239616631363839 Jun 12 23:03:08.055000 audit: BPF prog-id=208 op=LOAD Jun 12 23:03:08.055000 audit[5972]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6cc84edba4a8 a2=98 a3=0 items=0 ppid=5961 pid=5972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:08.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623364643666363732663962303764613239616631363839 Jun 12 23:03:08.070121 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:08.075850 kernel: docker0: port 1(veth11e29e9) entered blocking state Jun 12 23:03:08.075924 kernel: docker0: port 1(veth11e29e9) entered disabled state Jun 12 23:03:08.078833 kernel: veth11e29e9: entered allmulticast mode Jun 12 23:03:08.082065 kernel: veth11e29e9: entered promiscuous mode Jun 12 23:03:08.067000 audit: ANOM_PROMISCUOUS dev=veth11e29e9 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:08.067000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760bc31ec0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:08.067000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:08.083000 audit[5993]: NETFILTER_CFG table=raw:101 family=2 entries=1 op=nft_register_rule pid=5993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:08.083000 audit[5993]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffed7e7f70 a2=0 a3=0 items=0 ppid=2935 pid=5993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:08.083000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:08.084881 systemd-networkd[2176]: veth11e29e9: Link UP Jun 12 23:03:08.102846 kernel: eth0: renamed from veth772b576 Jun 12 23:03:08.102925 kernel: docker0: port 1(veth11e29e9) entered blocking state Jun 12 23:03:08.106164 kernel: docker0: port 1(veth11e29e9) entered forwarding state Jun 12 23:03:08.106384 systemd-networkd[2176]: veth11e29e9: Gained carrier Jun 12 23:03:08.106771 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:08.509024 sshd[5951]: Invalid user kibana from 43.160.253.60 port 54238 Jun 12 23:03:08.671203 sshd[5951]: Connection closed by invalid user kibana 43.160.253.60 port 54238 [preauth] Jun 12 23:03:08.670000 audit[5951]: AUDIT1109 pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:08.674793 kernel: kauditd_printk_skb: 140 callbacks suppressed Jun 12 23:03:08.674853 kernel: audit: type=1109 audit(1781305388.670:841): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:08.677045 systemd[1]: sshd@26-21-10.0.0.35:22-43.160.253.60:54238.service: Deactivated successfully. Jun 12 23:03:08.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-21-10.0.0.35:22-43.160.253.60:54238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:08.702061 kernel: audit: type=1131 audit(1781305388.676:842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-21-10.0.0.35:22-43.160.253.60:54238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:08.842141 systemd[1]: Started sshd@27-4103-10.0.0.35:22-43.160.253.60:54246.service - OpenSSH per-connection server daemon (43.160.253.60:54246). Jun 12 23:03:08.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-4103-10.0.0.35:22-43.160.253.60:54246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:08.859788 kernel: audit: type=1130 audit(1781305388.841:843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-4103-10.0.0.35:22-43.160.253.60:54246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:09.138391 systemd[1]: docker-bb3dd6f672f9b07da29af1689ee480848a896ec9d4bd81baf314173ef23d1450.scope: Deactivated successfully. Jun 12 23:03:09.151914 dockerd[2935]: time="2026-06-12T23:03:09.151769050Z" level=info msg="ignoring event" container=bb3dd6f672f9b07da29af1689ee480848a896ec9d4bd81baf314173ef23d1450 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:09.152451 containerd[2455]: time="2026-06-12T23:03:09.151695862Z" level=info msg="shim disconnected" id=bb3dd6f672f9b07da29af1689ee480848a896ec9d4bd81baf314173ef23d1450 namespace=moby Jun 12 23:03:09.152451 containerd[2455]: time="2026-06-12T23:03:09.152252569Z" level=info msg="cleaning up after shim disconnected" id=bb3dd6f672f9b07da29af1689ee480848a896ec9d4bd81baf314173ef23d1450 namespace=moby Jun 12 23:03:09.152451 containerd[2455]: time="2026-06-12T23:03:09.152262217Z" level=info msg="cleaning up dead shim" id=bb3dd6f672f9b07da29af1689ee480848a896ec9d4bd81baf314173ef23d1450 namespace=moby Jun 12 23:03:09.172046 kernel: docker0: port 1(veth11e29e9) entered disabled state Jun 12 23:03:09.171857 systemd-networkd[2176]: veth11e29e9: Lost carrier Jun 12 23:03:09.175798 kernel: veth772b576: renamed from eth0 Jun 12 23:03:09.189000 audit[6031]: NETFILTER_CFG table=raw:102 family=2 entries=1 op=nft_unregister_rule pid=6031 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:09.189000 audit[6031]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffb1cdf00 a2=0 a3=0 items=0 ppid=2935 pid=6031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.216224 kernel: audit: type=1325 audit(1781305389.189:844): table=raw:102 family=2 entries=1 op=nft_unregister_rule pid=6031 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:09.216286 kernel: audit: type=1300 audit(1781305389.189:844): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffb1cdf00 a2=0 a3=0 items=0 ppid=2935 pid=6031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.189000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:09.227614 kernel: audit: type=1327 audit(1781305389.189:844): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:09.232181 kernel: docker0: port 1(veth11e29e9) entered disabled state Jun 12 23:03:09.228818 systemd-networkd[2176]: veth11e29e9: Link DOWN Jun 12 23:03:09.239962 kernel: veth11e29e9 (unregistering): left allmulticast mode Jun 12 23:03:09.240026 kernel: veth11e29e9 (unregistering): left promiscuous mode Jun 12 23:03:09.227000 audit: ANOM_PROMISCUOUS dev=veth11e29e9 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:09.243305 kernel: docker0: port 1(veth11e29e9) entered disabled state Jun 12 23:03:09.243320 kernel: audit: type=1700 audit(1781305389.227:845): dev=veth11e29e9 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:09.227000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ff240 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.227000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:09.294509 kernel: audit: type=1300 audit(1781305389.227:845): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ff240 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.294567 kernel: audit: type=1327 audit(1781305389.227:845): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:09.296294 systemd[1]: run-docker-netns-33689b2f0c1e.mount: Deactivated successfully. Jun 12 23:03:09.300634 systemd[1]: var-lib-docker-overlay2-ab17d232aaea6c3e4ac68b2e25cff01b4b0100db50b3954318e1274aade22351-merged.mount: Deactivated successfully. Jun 12 23:03:09.312000 audit: BPF prog-id=204 op=UNLOAD Jun 12 23:03:09.312000 audit: BPF prog-id=208 op=UNLOAD Jun 12 23:03:09.347908 kernel: audit: type=1334 audit(1781305389.312:846): prog-id=204 op=UNLOAD Jun 12 23:03:09.381598 sshd[6005]: Invalid user orangepi from 43.160.253.60 port 54246 Jun 12 23:03:09.402113 systemd[1]: var-lib-docker-overlay2-a30649c0afcb05d3b9a3b748e41f413f83594f8e639c95a98f8ab566266b521a\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:09.489599 containerd[2455]: time="2026-06-12T23:03:09.489495561Z" level=info msg="connecting to shim bf4f20c8015e04038be80f56db9e62c1b6005a5443ed28be8a8390f2f56e57d7" address="unix:///run/containerd/s/e35547b7adabc61ef99cb28978bc2985248cc142f7d36c9d1d181cf8a57cc869" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:09.503922 systemd[1]: Started docker-bf4f20c8015e04038be80f56db9e62c1b6005a5443ed28be8a8390f2f56e57d7.scope - libcontainer container bf4f20c8015e04038be80f56db9e62c1b6005a5443ed28be8a8390f2f56e57d7. Jun 12 23:03:09.510000 audit: BPF prog-id=209 op=LOAD Jun 12 23:03:09.510000 audit: BPF prog-id=210 op=LOAD Jun 12 23:03:09.510000 audit[6060]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2ead425bff80 a2=98 a3=0 items=0 ppid=6049 pid=6060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62663466323063383031356530343033386265383066353664 Jun 12 23:03:09.510000 audit: BPF prog-id=210 op=UNLOAD Jun 12 23:03:09.510000 audit[6060]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6049 pid=6060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62663466323063383031356530343033386265383066353664 Jun 12 23:03:09.510000 audit: BPF prog-id=211 op=LOAD Jun 12 23:03:09.510000 audit[6060]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2ead425c0258 a2=98 a3=0 items=0 ppid=6049 pid=6060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62663466323063383031356530343033386265383066353664 Jun 12 23:03:09.510000 audit: BPF prog-id=212 op=LOAD Jun 12 23:03:09.510000 audit[6060]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2ead425bff98 a2=98 a3=0 items=0 ppid=6049 pid=6060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62663466323063383031356530343033386265383066353664 Jun 12 23:03:09.510000 audit: BPF prog-id=212 op=UNLOAD Jun 12 23:03:09.510000 audit[6060]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6049 pid=6060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62663466323063383031356530343033386265383066353664 Jun 12 23:03:09.510000 audit: BPF prog-id=211 op=UNLOAD Jun 12 23:03:09.510000 audit[6060]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6049 pid=6060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62663466323063383031356530343033386265383066353664 Jun 12 23:03:09.510000 audit: BPF prog-id=213 op=LOAD Jun 12 23:03:09.510000 audit[6060]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2ead425c04a8 a2=98 a3=0 items=0 ppid=6049 pid=6060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62663466323063383031356530343033386265383066353664 Jun 12 23:03:09.523666 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:09.530415 kernel: docker0: port 1(veth62ffd4b) entered blocking state Jun 12 23:03:09.530480 kernel: docker0: port 1(veth62ffd4b) entered disabled state Jun 12 23:03:09.533281 kernel: veth62ffd4b: entered allmulticast mode Jun 12 23:03:09.535939 kernel: veth62ffd4b: entered promiscuous mode Jun 12 23:03:09.522000 audit: ANOM_PROMISCUOUS dev=veth62ffd4b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:09.522000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b482ab0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.522000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:09.537000 audit[6081]: NETFILTER_CFG table=raw:103 family=2 entries=1 op=nft_register_rule pid=6081 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:09.537000 audit[6081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcf06b9b0 a2=0 a3=0 items=0 ppid=2935 pid=6081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:09.537000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:09.538324 systemd-networkd[2176]: veth62ffd4b: Link UP Jun 12 23:03:09.543743 sshd[6005]: Connection closed by invalid user orangepi 43.160.253.60 port 54246 [preauth] Jun 12 23:03:09.543000 audit[6005]: AUDIT1109 pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:09.545259 systemd[1]: sshd@27-4103-10.0.0.35:22-43.160.253.60:54246.service: Deactivated successfully. Jun 12 23:03:09.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-4103-10.0.0.35:22-43.160.253.60:54246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:09.554803 kernel: eth0: renamed from veth4fe034c Jun 12 23:03:09.561874 kernel: docker0: port 1(veth62ffd4b) entered blocking state Jun 12 23:03:09.561923 kernel: docker0: port 1(veth62ffd4b) entered forwarding state Jun 12 23:03:09.562133 systemd-networkd[2176]: veth62ffd4b: Gained carrier Jun 12 23:03:09.562517 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:09.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-22-10.0.0.35:22-43.160.253.60:54262 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:09.723010 systemd[1]: Started sshd@28-22-10.0.0.35:22-43.160.253.60:54262.service - OpenSSH per-connection server daemon (43.160.253.60:54262). Jun 12 23:03:10.237397 sshd[6093]: Invalid user testuser from 43.160.253.60 port 54262 Jun 12 23:03:10.400492 sshd[6093]: Connection closed by invalid user testuser 43.160.253.60 port 54262 [preauth] Jun 12 23:03:10.400000 audit[6093]: AUDIT1109 pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:10.402309 systemd[1]: sshd@28-22-10.0.0.35:22-43.160.253.60:54262.service: Deactivated successfully. Jun 12 23:03:10.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-22-10.0.0.35:22-43.160.253.60:54262 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:10.568812 systemd[1]: Started sshd@29-23-10.0.0.35:22-43.160.253.60:54264.service - OpenSSH per-connection server daemon (43.160.253.60:54264). Jun 12 23:03:10.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-23-10.0.0.35:22-43.160.253.60:54264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:10.587234 systemd[1]: docker-bf4f20c8015e04038be80f56db9e62c1b6005a5443ed28be8a8390f2f56e57d7.scope: Deactivated successfully. Jun 12 23:03:10.599072 dockerd[2935]: time="2026-06-12T23:03:10.599032897Z" level=info msg="ignoring event" container=bf4f20c8015e04038be80f56db9e62c1b6005a5443ed28be8a8390f2f56e57d7 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:10.599788 containerd[2455]: time="2026-06-12T23:03:10.599743021Z" level=info msg="shim disconnected" id=bf4f20c8015e04038be80f56db9e62c1b6005a5443ed28be8a8390f2f56e57d7 namespace=moby Jun 12 23:03:10.600048 containerd[2455]: time="2026-06-12T23:03:10.599807210Z" level=info msg="cleaning up after shim disconnected" id=bf4f20c8015e04038be80f56db9e62c1b6005a5443ed28be8a8390f2f56e57d7 namespace=moby Jun 12 23:03:10.600048 containerd[2455]: time="2026-06-12T23:03:10.599816258Z" level=info msg="cleaning up dead shim" id=bf4f20c8015e04038be80f56db9e62c1b6005a5443ed28be8a8390f2f56e57d7 namespace=moby Jun 12 23:03:10.621460 kernel: docker0: port 1(veth62ffd4b) entered disabled state Jun 12 23:03:10.619880 systemd-networkd[2176]: veth62ffd4b: Lost carrier Jun 12 23:03:10.621714 kernel: veth4fe034c: renamed from eth0 Jun 12 23:03:10.635000 audit[6125]: NETFILTER_CFG table=raw:104 family=2 entries=1 op=nft_unregister_rule pid=6125 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:10.635000 audit[6125]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe567af40 a2=0 a3=0 items=0 ppid=2935 pid=6125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.635000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:10.639189 systemd-networkd[2176]: veth62ffd4b: Link DOWN Jun 12 23:03:10.642931 kernel: docker0: port 1(veth62ffd4b) entered disabled state Jun 12 23:03:10.650333 kernel: veth62ffd4b (unregistering): left allmulticast mode Jun 12 23:03:10.650391 kernel: veth62ffd4b (unregistering): left promiscuous mode Jun 12 23:03:10.638000 audit: ANOM_PROMISCUOUS dev=veth62ffd4b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:10.654717 kernel: docker0: port 1(veth62ffd4b) entered disabled state Jun 12 23:03:10.638000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f66a0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.638000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:10.668581 systemd[1]: run-docker-netns-7a93990b8349.mount: Deactivated successfully. Jun 12 23:03:10.672922 systemd[1]: var-lib-docker-overlay2-a30649c0afcb05d3b9a3b748e41f413f83594f8e639c95a98f8ab566266b521a-merged.mount: Deactivated successfully. Jun 12 23:03:10.682000 audit: BPF prog-id=209 op=UNLOAD Jun 12 23:03:10.682000 audit: BPF prog-id=213 op=UNLOAD Jun 12 23:03:10.795437 systemd[1]: var-lib-docker-overlay2-5a74908e388a0e9d90b2b9ed893da6620059fe24be5d16c91a236d2350dcc7cd\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:10.865867 containerd[2455]: time="2026-06-12T23:03:10.865437860Z" level=info msg="connecting to shim 580c7eeaf711240ee14de3eb84a2e3c4e1a6b135d9155f13cc14a67999be4c60" address="unix:///run/containerd/s/3f29f39c28153c2beb22693069cb8fbe7cef88d4469383576e708253950298d7" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:10.882931 systemd[1]: Started docker-580c7eeaf711240ee14de3eb84a2e3c4e1a6b135d9155f13cc14a67999be4c60.scope - libcontainer container 580c7eeaf711240ee14de3eb84a2e3c4e1a6b135d9155f13cc14a67999be4c60. Jun 12 23:03:10.891000 audit: BPF prog-id=214 op=LOAD Jun 12 23:03:10.891000 audit: BPF prog-id=215 op=LOAD Jun 12 23:03:10.891000 audit[6153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=3d0ec02b7f80 a2=98 a3=0 items=0 ppid=6142 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383063376565616637313132343065653134646533656238 Jun 12 23:03:10.891000 audit: BPF prog-id=215 op=UNLOAD Jun 12 23:03:10.891000 audit[6153]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=6142 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.891000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383063376565616637313132343065653134646533656238 Jun 12 23:03:10.892000 audit: BPF prog-id=216 op=LOAD Jun 12 23:03:10.892000 audit[6153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=3d0ec02b8258 a2=98 a3=0 items=0 ppid=6142 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383063376565616637313132343065653134646533656238 Jun 12 23:03:10.892000 audit: BPF prog-id=217 op=LOAD Jun 12 23:03:10.892000 audit[6153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=3d0ec02b7f98 a2=98 a3=0 items=0 ppid=6142 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383063376565616637313132343065653134646533656238 Jun 12 23:03:10.892000 audit: BPF prog-id=217 op=UNLOAD Jun 12 23:03:10.892000 audit[6153]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=6142 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383063376565616637313132343065653134646533656238 Jun 12 23:03:10.892000 audit: BPF prog-id=216 op=UNLOAD Jun 12 23:03:10.892000 audit[6153]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=6142 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383063376565616637313132343065653134646533656238 Jun 12 23:03:10.892000 audit: BPF prog-id=218 op=LOAD Jun 12 23:03:10.892000 audit[6153]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=3d0ec02b84a8 a2=98 a3=0 items=0 ppid=6142 pid=6153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35383063376565616637313132343065653134646533656238 Jun 12 23:03:10.907370 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:10.915089 kernel: docker0: port 1(veth8487224) entered blocking state Jun 12 23:03:10.915157 kernel: docker0: port 1(veth8487224) entered disabled state Jun 12 23:03:10.918132 kernel: veth8487224: entered allmulticast mode Jun 12 23:03:10.906000 audit: ANOM_PROMISCUOUS dev=veth8487224 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:10.906000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f89f0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.906000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:10.923558 kernel: veth8487224: entered promiscuous mode Jun 12 23:03:10.923000 audit[6175]: NETFILTER_CFG table=raw:105 family=2 entries=1 op=nft_register_rule pid=6175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:10.923000 audit[6175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff44599b0 a2=0 a3=0 items=0 ppid=2935 pid=6175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:10.923000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:10.925069 systemd-networkd[2176]: veth8487224: Link UP Jun 12 23:03:10.942794 kernel: eth0: renamed from vethd46babe Jun 12 23:03:10.942872 kernel: docker0: port 1(veth8487224) entered blocking state Jun 12 23:03:10.950048 kernel: docker0: port 1(veth8487224) entered forwarding state Jun 12 23:03:10.950365 systemd-networkd[2176]: veth8487224: Gained carrier Jun 12 23:03:10.950575 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:11.081226 sshd[6099]: Invalid user developer from 43.160.253.60 port 54264 Jun 12 23:03:11.243057 sshd[6099]: Connection closed by invalid user developer 43.160.253.60 port 54264 [preauth] Jun 12 23:03:11.241000 audit[6099]: AUDIT1109 pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:11.244827 systemd[1]: sshd@29-23-10.0.0.35:22-43.160.253.60:54264.service: Deactivated successfully. Jun 12 23:03:11.243000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-23-10.0.0.35:22-43.160.253.60:54264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:11.415361 systemd[1]: Started sshd@30-24-10.0.0.35:22-43.160.253.60:54278.service - OpenSSH per-connection server daemon (43.160.253.60:54278). Jun 12 23:03:11.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-24-10.0.0.35:22-43.160.253.60:54278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:11.927987 sshd[6187]: Invalid user user from 43.160.253.60 port 54278 Jun 12 23:03:11.980301 systemd[1]: docker-580c7eeaf711240ee14de3eb84a2e3c4e1a6b135d9155f13cc14a67999be4c60.scope: Deactivated successfully. Jun 12 23:03:11.991919 dockerd[2935]: time="2026-06-12T23:03:11.991837611Z" level=info msg="ignoring event" container=580c7eeaf711240ee14de3eb84a2e3c4e1a6b135d9155f13cc14a67999be4c60 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:11.992556 containerd[2455]: time="2026-06-12T23:03:11.992305075Z" level=info msg="shim disconnected" id=580c7eeaf711240ee14de3eb84a2e3c4e1a6b135d9155f13cc14a67999be4c60 namespace=moby Jun 12 23:03:11.992556 containerd[2455]: time="2026-06-12T23:03:11.992331418Z" level=info msg="cleaning up after shim disconnected" id=580c7eeaf711240ee14de3eb84a2e3c4e1a6b135d9155f13cc14a67999be4c60 namespace=moby Jun 12 23:03:11.992556 containerd[2455]: time="2026-06-12T23:03:11.992336914Z" level=info msg="cleaning up dead shim" id=580c7eeaf711240ee14de3eb84a2e3c4e1a6b135d9155f13cc14a67999be4c60 namespace=moby Jun 12 23:03:12.025647 systemd-networkd[2176]: veth8487224: Lost carrier Jun 12 23:03:12.026005 kernel: docker0: port 1(veth8487224) entered disabled state Jun 12 23:03:12.029795 kernel: vethd46babe: renamed from eth0 Jun 12 23:03:12.046000 audit[6214]: NETFILTER_CFG table=raw:106 family=2 entries=1 op=nft_unregister_rule pid=6214 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:12.046000 audit[6214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffc9aee30 a2=0 a3=0 items=0 ppid=2935 pid=6214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.046000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:12.054178 systemd-networkd[2176]: veth8487224: Link DOWN Jun 12 23:03:12.058799 kernel: docker0: port 1(veth8487224) entered disabled state Jun 12 23:03:12.067237 kernel: veth8487224 (unregistering): left allmulticast mode Jun 12 23:03:12.067295 kernel: veth8487224 (unregistering): left promiscuous mode Jun 12 23:03:12.052000 audit: ANOM_PROMISCUOUS dev=veth8487224 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:12.071416 kernel: docker0: port 1(veth8487224) entered disabled state Jun 12 23:03:12.052000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b23d060 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.052000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:12.082320 systemd[1]: run-docker-netns-d47f797fd18b.mount: Deactivated successfully. Jun 12 23:03:12.088992 systemd[1]: var-lib-docker-overlay2-5a74908e388a0e9d90b2b9ed893da6620059fe24be5d16c91a236d2350dcc7cd-merged.mount: Deactivated successfully. Jun 12 23:03:12.090415 sshd[6187]: Connection closed by invalid user user 43.160.253.60 port 54278 [preauth] Jun 12 23:03:12.088000 audit[6187]: AUDIT1109 pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:12.092073 systemd[1]: sshd@30-24-10.0.0.35:22-43.160.253.60:54278.service: Deactivated successfully. Jun 12 23:03:12.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-24-10.0.0.35:22-43.160.253.60:54278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:12.092000 audit: BPF prog-id=214 op=UNLOAD Jun 12 23:03:12.092000 audit: BPF prog-id=218 op=UNLOAD Jun 12 23:03:12.189585 systemd[1]: var-lib-docker-overlay2-30745dad31e333f6bece43184175da29947cf78ee10bb83f9f869f6e7829d795\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:12.257555 containerd[2455]: time="2026-06-12T23:03:12.257208122Z" level=info msg="connecting to shim f7415827dbd667eabf1be84e58a043855f9263177b1d4cb4b36ea58e4f1e9353" address="unix:///run/containerd/s/d7417289245e45371374a0176dc794cc4442807cbb8c299ece7b86ad7bdd6861" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:12.261030 systemd[1]: Started sshd@31-25-10.0.0.35:22-43.160.253.60:54284.service - OpenSSH per-connection server daemon (43.160.253.60:54284). Jun 12 23:03:12.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-25-10.0.0.35:22-43.160.253.60:54284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:12.277934 systemd[1]: Started docker-f7415827dbd667eabf1be84e58a043855f9263177b1d4cb4b36ea58e4f1e9353.scope - libcontainer container f7415827dbd667eabf1be84e58a043855f9263177b1d4cb4b36ea58e4f1e9353. Jun 12 23:03:12.284000 audit: BPF prog-id=219 op=LOAD Jun 12 23:03:12.285000 audit: BPF prog-id=220 op=LOAD Jun 12 23:03:12.285000 audit[6247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f6ba6337f80 a2=98 a3=0 items=0 ppid=6235 pid=6247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373431353832376462643636376561626631626538346535 Jun 12 23:03:12.285000 audit: BPF prog-id=220 op=UNLOAD Jun 12 23:03:12.285000 audit[6247]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6235 pid=6247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373431353832376462643636376561626631626538346535 Jun 12 23:03:12.285000 audit: BPF prog-id=221 op=LOAD Jun 12 23:03:12.285000 audit[6247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f6ba6338258 a2=98 a3=0 items=0 ppid=6235 pid=6247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373431353832376462643636376561626631626538346535 Jun 12 23:03:12.285000 audit: BPF prog-id=222 op=LOAD Jun 12 23:03:12.285000 audit[6247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1f6ba6337f98 a2=98 a3=0 items=0 ppid=6235 pid=6247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373431353832376462643636376561626631626538346535 Jun 12 23:03:12.285000 audit: BPF prog-id=222 op=UNLOAD Jun 12 23:03:12.285000 audit[6247]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6235 pid=6247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373431353832376462643636376561626631626538346535 Jun 12 23:03:12.286000 audit: BPF prog-id=221 op=UNLOAD Jun 12 23:03:12.286000 audit[6247]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6235 pid=6247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373431353832376462643636376561626631626538346535 Jun 12 23:03:12.286000 audit: BPF prog-id=223 op=LOAD Jun 12 23:03:12.286000 audit[6247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f6ba63384a8 a2=98 a3=0 items=0 ppid=6235 pid=6247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66373431353832376462643636376561626631626538346535 Jun 12 23:03:12.298636 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:12.306195 kernel: docker0: port 1(veth7bf6d8b) entered blocking state Jun 12 23:03:12.306272 kernel: docker0: port 1(veth7bf6d8b) entered disabled state Jun 12 23:03:12.309536 kernel: veth7bf6d8b: entered allmulticast mode Jun 12 23:03:12.297000 audit: ANOM_PROMISCUOUS dev=veth7bf6d8b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:12.312821 kernel: veth7bf6d8b: entered promiscuous mode Jun 12 23:03:12.297000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beab050 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.297000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:12.313000 audit[6271]: NETFILTER_CFG table=raw:107 family=2 entries=1 op=nft_register_rule pid=6271 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:12.313000 audit[6271]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc0487ac0 a2=0 a3=0 items=0 ppid=2935 pid=6271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:12.313000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:12.315564 systemd-networkd[2176]: veth7bf6d8b: Link UP Jun 12 23:03:12.334790 kernel: eth0: renamed from veth6dc2c0a Jun 12 23:03:12.334852 kernel: docker0: port 1(veth7bf6d8b) entered blocking state Jun 12 23:03:12.334871 kernel: docker0: port 1(veth7bf6d8b) entered forwarding state Jun 12 23:03:12.337795 systemd-networkd[2176]: veth7bf6d8b: Gained carrier Jun 12 23:03:12.338820 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:12.772400 sshd[6244]: Invalid user ec2-user from 43.160.253.60 port 54284 Jun 12 23:03:12.935126 sshd[6244]: Connection closed by invalid user ec2-user 43.160.253.60 port 54284 [preauth] Jun 12 23:03:12.933000 audit[6244]: AUDIT1109 pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:12.937073 systemd[1]: sshd@31-25-10.0.0.35:22-43.160.253.60:54284.service: Deactivated successfully. Jun 12 23:03:12.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-25-10.0.0.35:22-43.160.253.60:54284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:13.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-26-10.0.0.35:22-43.160.253.60:54296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:13.108052 systemd[1]: Started sshd@32-26-10.0.0.35:22-43.160.253.60:54296.service - OpenSSH per-connection server daemon (43.160.253.60:54296). Jun 12 23:03:13.361984 systemd[1]: docker-f7415827dbd667eabf1be84e58a043855f9263177b1d4cb4b36ea58e4f1e9353.scope: Deactivated successfully. Jun 12 23:03:13.374318 dockerd[2935]: time="2026-06-12T23:03:13.374276244Z" level=info msg="ignoring event" container=f7415827dbd667eabf1be84e58a043855f9263177b1d4cb4b36ea58e4f1e9353 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:13.374720 containerd[2455]: time="2026-06-12T23:03:13.374421068Z" level=info msg="shim disconnected" id=f7415827dbd667eabf1be84e58a043855f9263177b1d4cb4b36ea58e4f1e9353 namespace=moby Jun 12 23:03:13.374720 containerd[2455]: time="2026-06-12T23:03:13.374445331Z" level=info msg="cleaning up after shim disconnected" id=f7415827dbd667eabf1be84e58a043855f9263177b1d4cb4b36ea58e4f1e9353 namespace=moby Jun 12 23:03:13.374720 containerd[2455]: time="2026-06-12T23:03:13.374452467Z" level=info msg="cleaning up dead shim" id=f7415827dbd667eabf1be84e58a043855f9263177b1d4cb4b36ea58e4f1e9353 namespace=moby Jun 12 23:03:13.394756 systemd-networkd[2176]: veth7bf6d8b: Lost carrier Jun 12 23:03:13.395021 kernel: docker0: port 1(veth7bf6d8b) entered disabled state Jun 12 23:03:13.395045 kernel: veth6dc2c0a: renamed from eth0 Jun 12 23:03:13.408000 audit[6308]: NETFILTER_CFG table=raw:108 family=2 entries=1 op=nft_unregister_rule pid=6308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:13.408000 audit[6308]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcc3f9b90 a2=0 a3=0 items=0 ppid=2935 pid=6308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.408000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:13.417144 systemd-networkd[2176]: veth7bf6d8b: Link DOWN Jun 12 23:03:13.424728 kernel: docker0: port 1(veth7bf6d8b) entered disabled state Jun 12 23:03:13.424799 kernel: veth7bf6d8b (unregistering): left allmulticast mode Jun 12 23:03:13.428453 kernel: veth7bf6d8b (unregistering): left promiscuous mode Jun 12 23:03:13.415000 audit: ANOM_PROMISCUOUS dev=veth7bf6d8b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:13.432430 kernel: docker0: port 1(veth7bf6d8b) entered disabled state Jun 12 23:03:13.415000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bafa860 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.415000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:13.442770 systemd[1]: run-docker-netns-17bf806f1d59.mount: Deactivated successfully. Jun 12 23:03:13.446410 systemd[1]: var-lib-docker-overlay2-30745dad31e333f6bece43184175da29947cf78ee10bb83f9f869f6e7829d795-merged.mount: Deactivated successfully. Jun 12 23:03:13.451000 audit: BPF prog-id=219 op=UNLOAD Jun 12 23:03:13.451000 audit: BPF prog-id=223 op=UNLOAD Jun 12 23:03:13.541755 systemd[1]: var-lib-docker-overlay2-2a9633df4d15d5fb3fe4b672cf560d0add21e75f0e19a3ad782d0550326c0f65\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:13.606268 containerd[2455]: time="2026-06-12T23:03:13.606190713Z" level=info msg="connecting to shim 898259c92c9980a684aa4098d34a9a4f144afffcd97a5ad870aac8c713604794" address="unix:///run/containerd/s/a9cf6717e557e56e8c09b0765cd8066b9e05cf002be59c298905f35f55d20053" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:13.622930 systemd[1]: Started docker-898259c92c9980a684aa4098d34a9a4f144afffcd97a5ad870aac8c713604794.scope - libcontainer container 898259c92c9980a684aa4098d34a9a4f144afffcd97a5ad870aac8c713604794. Jun 12 23:03:13.624600 sshd[6282]: Invalid user deploy from 43.160.253.60 port 54296 Jun 12 23:03:13.631000 audit: BPF prog-id=224 op=LOAD Jun 12 23:03:13.631000 audit: BPF prog-id=225 op=LOAD Jun 12 23:03:13.631000 audit[6336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=181fcf237f80 a2=98 a3=0 items=0 ppid=6326 pid=6336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393832353963393263393938306136383461613430393864 Jun 12 23:03:13.632000 audit: BPF prog-id=225 op=UNLOAD Jun 12 23:03:13.632000 audit[6336]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6326 pid=6336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393832353963393263393938306136383461613430393864 Jun 12 23:03:13.632000 audit: BPF prog-id=226 op=LOAD Jun 12 23:03:13.632000 audit[6336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=181fcf238258 a2=98 a3=0 items=0 ppid=6326 pid=6336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393832353963393263393938306136383461613430393864 Jun 12 23:03:13.632000 audit: BPF prog-id=227 op=LOAD Jun 12 23:03:13.632000 audit[6336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=181fcf237f98 a2=98 a3=0 items=0 ppid=6326 pid=6336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393832353963393263393938306136383461613430393864 Jun 12 23:03:13.632000 audit: BPF prog-id=227 op=UNLOAD Jun 12 23:03:13.632000 audit[6336]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6326 pid=6336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393832353963393263393938306136383461613430393864 Jun 12 23:03:13.632000 audit: BPF prog-id=226 op=UNLOAD Jun 12 23:03:13.632000 audit[6336]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6326 pid=6336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393832353963393263393938306136383461613430393864 Jun 12 23:03:13.632000 audit: BPF prog-id=228 op=LOAD Jun 12 23:03:13.632000 audit[6336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=181fcf2384a8 a2=98 a3=0 items=0 ppid=6326 pid=6336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38393832353963393263393938306136383461613430393864 Jun 12 23:03:13.653838 kernel: docker0: port 1(vethfb70769) entered blocking state Jun 12 23:03:13.653908 kernel: docker0: port 1(vethfb70769) entered disabled state Jun 12 23:03:13.656850 kernel: vethfb70769: entered allmulticast mode Jun 12 23:03:13.659629 kernel: vethfb70769: entered promiscuous mode Jun 12 23:03:13.645000 audit: ANOM_PROMISCUOUS dev=vethfb70769 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:13.660192 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:13.645000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaade0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.645000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:13.660000 audit[6359]: NETFILTER_CFG table=raw:109 family=2 entries=1 op=nft_register_rule pid=6359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:13.660000 audit[6359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc8f13f10 a2=0 a3=0 items=0 ppid=2935 pid=6359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:13.660000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:13.664132 systemd-networkd[2176]: vethfb70769: Link UP Jun 12 23:03:13.677798 kernel: eth0: renamed from veth3f03df5 Jun 12 23:03:13.685379 kernel: docker0: port 1(vethfb70769) entered blocking state Jun 12 23:03:13.685448 kernel: docker0: port 1(vethfb70769) entered forwarding state Jun 12 23:03:13.685751 systemd-networkd[2176]: vethfb70769: Gained carrier Jun 12 23:03:13.686080 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:13.786277 sshd[6282]: Connection closed by invalid user deploy 43.160.253.60 port 54296 [preauth] Jun 12 23:03:13.785000 audit[6282]: AUDIT1109 pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:13.789725 kernel: kauditd_printk_skb: 152 callbacks suppressed Jun 12 23:03:13.789775 kernel: audit: type=1109 audit(1781305393.785:915): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:13.792055 systemd[1]: sshd@32-26-10.0.0.35:22-43.160.253.60:54296.service: Deactivated successfully. Jun 12 23:03:13.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-26-10.0.0.35:22-43.160.253.60:54296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:13.816800 kernel: audit: type=1131 audit(1781305393.792:916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-26-10.0.0.35:22-43.160.253.60:54296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:13.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-27-10.0.0.35:22-43.160.253.60:54300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:13.957069 systemd[1]: Started sshd@33-27-10.0.0.35:22-43.160.253.60:54300.service - OpenSSH per-connection server daemon (43.160.253.60:54300). Jun 12 23:03:13.971807 kernel: audit: type=1130 audit(1781305393.955:917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-27-10.0.0.35:22-43.160.253.60:54300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:14.477038 sshd[6371]: Invalid user zjw from 43.160.253.60 port 54300 Jun 12 23:03:14.637934 sshd[6371]: Connection closed by invalid user zjw 43.160.253.60 port 54300 [preauth] Jun 12 23:03:14.636000 audit[6371]: AUDIT1109 pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:14.652763 systemd[1]: sshd@33-27-10.0.0.35:22-43.160.253.60:54300.service: Deactivated successfully. Jun 12 23:03:14.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-27-10.0.0.35:22-43.160.253.60:54300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:14.667598 kernel: audit: type=1109 audit(1781305394.636:918): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:14.667672 kernel: audit: type=1131 audit(1781305394.651:919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-27-10.0.0.35:22-43.160.253.60:54300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:14.711967 systemd[1]: docker-898259c92c9980a684aa4098d34a9a4f144afffcd97a5ad870aac8c713604794.scope: Deactivated successfully. Jun 12 23:03:14.724001 dockerd[2935]: time="2026-06-12T23:03:14.723950282Z" level=info msg="ignoring event" container=898259c92c9980a684aa4098d34a9a4f144afffcd97a5ad870aac8c713604794 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:14.724462 containerd[2455]: time="2026-06-12T23:03:14.724246749Z" level=info msg="shim disconnected" id=898259c92c9980a684aa4098d34a9a4f144afffcd97a5ad870aac8c713604794 namespace=moby Jun 12 23:03:14.724462 containerd[2455]: time="2026-06-12T23:03:14.724277675Z" level=info msg="cleaning up after shim disconnected" id=898259c92c9980a684aa4098d34a9a4f144afffcd97a5ad870aac8c713604794 namespace=moby Jun 12 23:03:14.724462 containerd[2455]: time="2026-06-12T23:03:14.724283315Z" level=info msg="cleaning up dead shim" id=898259c92c9980a684aa4098d34a9a4f144afffcd97a5ad870aac8c713604794 namespace=moby Jun 12 23:03:14.744646 kernel: docker0: port 1(vethfb70769) entered disabled state Jun 12 23:03:14.743906 systemd-networkd[2176]: vethfb70769: Lost carrier Jun 12 23:03:14.747803 kernel: veth3f03df5: renamed from eth0 Jun 12 23:03:14.760000 audit[6398]: NETFILTER_CFG table=raw:110 family=2 entries=1 op=nft_unregister_rule pid=6398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:14.760000 audit[6398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc5414e40 a2=0 a3=0 items=0 ppid=2935 pid=6398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:14.787514 kernel: audit: type=1325 audit(1781305394.760:920): table=raw:110 family=2 entries=1 op=nft_unregister_rule pid=6398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:14.787580 kernel: audit: type=1300 audit(1781305394.760:920): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc5414e40 a2=0 a3=0 items=0 ppid=2935 pid=6398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:14.760000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:14.799147 kernel: audit: type=1327 audit(1781305394.760:920): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:14.800425 systemd-networkd[2176]: vethfb70769: Link DOWN Jun 12 23:03:14.804805 kernel: docker0: port 1(vethfb70769) entered disabled state Jun 12 23:03:14.804864 kernel: vethfb70769 (unregistering): left allmulticast mode Jun 12 23:03:14.811695 kernel: vethfb70769 (unregistering): left promiscuous mode Jun 12 23:03:14.798000 audit: ANOM_PROMISCUOUS dev=vethfb70769 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:14.816083 kernel: docker0: port 1(vethfb70769) entered disabled state Jun 12 23:03:14.816106 kernel: audit: type=1700 audit(1781305394.798:921): dev=vethfb70769 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:14.798000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb311c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:14.832027 systemd[1]: Started sshd@34-4104-10.0.0.35:22-43.160.253.60:54308.service - OpenSSH per-connection server daemon (43.160.253.60:54308). Jun 12 23:03:14.798000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:14.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-4104-10.0.0.35:22-43.160.253.60:54308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:14.846804 kernel: audit: type=1300 audit(1781305394.798:921): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb311c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:14.848950 systemd[1]: run-docker-netns-b8ad0ee9918b.mount: Deactivated successfully. Jun 12 23:03:14.853684 systemd[1]: var-lib-docker-overlay2-2a9633df4d15d5fb3fe4b672cf560d0add21e75f0e19a3ad782d0550326c0f65-merged.mount: Deactivated successfully. Jun 12 23:03:14.857000 audit: BPF prog-id=224 op=UNLOAD Jun 12 23:03:14.857000 audit: BPF prog-id=228 op=UNLOAD Jun 12 23:03:14.944839 systemd[1]: var-lib-docker-overlay2-e126fbe7294224f3a3444a1bef9fb7c33fd7855e8072095a5267f1ee3d62be97\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:15.022704 containerd[2455]: time="2026-06-12T23:03:15.022251319Z" level=info msg="connecting to shim a0441c32fd6c4c9d7c5a73bcf5f2b0b1ad2d828e71576c33c0c29dcc22f89cca" address="unix:///run/containerd/s/c4e4bf6d01a29bc147fa0567b8e17979b6bab16a79861852405594ec482be60e" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:15.036933 systemd[1]: Started docker-a0441c32fd6c4c9d7c5a73bcf5f2b0b1ad2d828e71576c33c0c29dcc22f89cca.scope - libcontainer container a0441c32fd6c4c9d7c5a73bcf5f2b0b1ad2d828e71576c33c0c29dcc22f89cca. Jun 12 23:03:15.043000 audit: BPF prog-id=229 op=LOAD Jun 12 23:03:15.043000 audit: BPF prog-id=230 op=LOAD Jun 12 23:03:15.043000 audit[6430]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5b561317df80 a2=98 a3=0 items=0 ppid=6419 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:15.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303434316333326664366334633964376335613733626366 Jun 12 23:03:15.043000 audit: BPF prog-id=230 op=UNLOAD Jun 12 23:03:15.043000 audit[6430]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6419 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:15.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303434316333326664366334633964376335613733626366 Jun 12 23:03:15.043000 audit: BPF prog-id=231 op=LOAD Jun 12 23:03:15.043000 audit[6430]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5b561317e258 a2=98 a3=0 items=0 ppid=6419 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:15.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303434316333326664366334633964376335613733626366 Jun 12 23:03:15.043000 audit: BPF prog-id=232 op=LOAD Jun 12 23:03:15.043000 audit[6430]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=5b561317df98 a2=98 a3=0 items=0 ppid=6419 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:15.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303434316333326664366334633964376335613733626366 Jun 12 23:03:15.043000 audit: BPF prog-id=232 op=UNLOAD Jun 12 23:03:15.043000 audit[6430]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6419 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:15.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303434316333326664366334633964376335613733626366 Jun 12 23:03:15.043000 audit: BPF prog-id=231 op=UNLOAD Jun 12 23:03:15.043000 audit[6430]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6419 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:15.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303434316333326664366334633964376335613733626366 Jun 12 23:03:15.043000 audit: BPF prog-id=233 op=LOAD Jun 12 23:03:15.043000 audit[6430]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5b561317e4a8 a2=98 a3=0 items=0 ppid=6419 pid=6430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:15.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61303434316333326664366334633964376335613733626366 Jun 12 23:03:15.064320 kernel: docker0: port 1(vethc690f80) entered blocking state Jun 12 23:03:15.064411 kernel: docker0: port 1(vethc690f80) entered disabled state Jun 12 23:03:15.067555 kernel: vethc690f80: entered allmulticast mode Jun 12 23:03:15.070696 kernel: vethc690f80: entered promiscuous mode Jun 12 23:03:15.054000 audit: ANOM_PROMISCUOUS dev=vethc690f80 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:15.054000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f96b0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:15.054000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:15.073183 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:15.073000 audit[6450]: NETFILTER_CFG table=raw:111 family=2 entries=1 op=nft_register_rule pid=6450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:15.073000 audit[6450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcfb19e30 a2=0 a3=0 items=0 ppid=2935 pid=6450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:15.073000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:15.075649 systemd-networkd[2176]: vethc690f80: Link UP Jun 12 23:03:15.090801 kernel: eth0: renamed from veth968f426 Jun 12 23:03:15.090880 kernel: docker0: port 1(vethc690f80) entered blocking state Jun 12 23:03:15.097649 kernel: docker0: port 1(vethc690f80) entered forwarding state Jun 12 23:03:15.098014 systemd-networkd[2176]: vethc690f80: Gained carrier Jun 12 23:03:15.098500 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:15.360319 sshd[6400]: Invalid user steam from 43.160.253.60 port 54308 Jun 12 23:03:15.523794 sshd[6400]: Connection closed by invalid user steam 43.160.253.60 port 54308 [preauth] Jun 12 23:03:15.522000 audit[6400]: AUDIT1109 pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:15.525202 systemd[1]: sshd@34-4104-10.0.0.35:22-43.160.253.60:54308.service: Deactivated successfully. Jun 12 23:03:15.524000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-4104-10.0.0.35:22-43.160.253.60:54308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:15.696002 systemd[1]: Started sshd@35-4105-10.0.0.35:22-43.160.253.60:40894.service - OpenSSH per-connection server daemon (43.160.253.60:40894). Jun 12 23:03:15.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-4105-10.0.0.35:22-43.160.253.60:40894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:16.128144 systemd[1]: docker-a0441c32fd6c4c9d7c5a73bcf5f2b0b1ad2d828e71576c33c0c29dcc22f89cca.scope: Deactivated successfully. Jun 12 23:03:16.139172 dockerd[2935]: time="2026-06-12T23:03:16.139119480Z" level=info msg="ignoring event" container=a0441c32fd6c4c9d7c5a73bcf5f2b0b1ad2d828e71576c33c0c29dcc22f89cca module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:16.139634 containerd[2455]: time="2026-06-12T23:03:16.139600082Z" level=info msg="shim disconnected" id=a0441c32fd6c4c9d7c5a73bcf5f2b0b1ad2d828e71576c33c0c29dcc22f89cca namespace=moby Jun 12 23:03:16.139634 containerd[2455]: time="2026-06-12T23:03:16.139631240Z" level=info msg="cleaning up after shim disconnected" id=a0441c32fd6c4c9d7c5a73bcf5f2b0b1ad2d828e71576c33c0c29dcc22f89cca namespace=moby Jun 12 23:03:16.139864 containerd[2455]: time="2026-06-12T23:03:16.139636912Z" level=info msg="cleaning up dead shim" id=a0441c32fd6c4c9d7c5a73bcf5f2b0b1ad2d828e71576c33c0c29dcc22f89cca namespace=moby Jun 12 23:03:16.163240 systemd-networkd[2176]: vethc690f80: Lost carrier Jun 12 23:03:16.164939 kernel: docker0: port 1(vethc690f80) entered disabled state Jun 12 23:03:16.164967 kernel: veth968f426: renamed from eth0 Jun 12 23:03:16.178000 audit[6489]: NETFILTER_CFG table=raw:112 family=2 entries=1 op=nft_unregister_rule pid=6489 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:16.178000 audit[6489]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffeb56b4c0 a2=0 a3=0 items=0 ppid=2935 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.178000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:16.184264 systemd-networkd[2176]: vethc690f80: Link DOWN Jun 12 23:03:16.191387 kernel: docker0: port 1(vethc690f80) entered disabled state Jun 12 23:03:16.191452 kernel: vethc690f80 (unregistering): left allmulticast mode Jun 12 23:03:16.195032 kernel: vethc690f80 (unregistering): left promiscuous mode Jun 12 23:03:16.183000 audit: ANOM_PROMISCUOUS dev=vethc690f80 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:16.199009 kernel: docker0: port 1(vethc690f80) entered disabled state Jun 12 23:03:16.183000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ff9c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.183000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:16.211856 systemd[1]: run-docker-netns-6a4185710ce1.mount: Deactivated successfully. Jun 12 23:03:16.215179 systemd[1]: var-lib-docker-overlay2-e126fbe7294224f3a3444a1bef9fb7c33fd7855e8072095a5267f1ee3d62be97-merged.mount: Deactivated successfully. Jun 12 23:03:16.216424 sshd[6463]: Invalid user vagrant from 43.160.253.60 port 40894 Jun 12 23:03:16.235000 audit: BPF prog-id=229 op=UNLOAD Jun 12 23:03:16.235000 audit: BPF prog-id=233 op=UNLOAD Jun 12 23:03:16.293601 systemd[1]: var-lib-docker-overlay2-4bbadd4cf9307205e710d5d3108a501958378078c05fec3dc218175f2b551e01\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:16.378495 sshd[6463]: Connection closed by invalid user vagrant 43.160.253.60 port 40894 [preauth] Jun 12 23:03:16.378000 audit[6463]: AUDIT1109 pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:16.380516 systemd[1]: sshd@35-4105-10.0.0.35:22-43.160.253.60:40894.service: Deactivated successfully. Jun 12 23:03:16.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-4105-10.0.0.35:22-43.160.253.60:40894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:16.393237 containerd[2455]: time="2026-06-12T23:03:16.393139836Z" level=info msg="connecting to shim 86132f9090f0e1d93660673a111ab0d599a96a64e861574116e27216ea058a61" address="unix:///run/containerd/s/6e54bdc34a757f79ad71e8836807ca55ac5332be33820e267d91582a133ad1df" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:16.407957 systemd[1]: Started docker-86132f9090f0e1d93660673a111ab0d599a96a64e861574116e27216ea058a61.scope - libcontainer container 86132f9090f0e1d93660673a111ab0d599a96a64e861574116e27216ea058a61. Jun 12 23:03:16.415000 audit: BPF prog-id=234 op=LOAD Jun 12 23:03:16.415000 audit: BPF prog-id=235 op=LOAD Jun 12 23:03:16.415000 audit[6521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=14197c41ff80 a2=98 a3=0 items=0 ppid=6510 pid=6521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363133326639303930663065316439333636303637336131 Jun 12 23:03:16.415000 audit: BPF prog-id=235 op=UNLOAD Jun 12 23:03:16.415000 audit[6521]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6510 pid=6521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363133326639303930663065316439333636303637336131 Jun 12 23:03:16.415000 audit: BPF prog-id=236 op=LOAD Jun 12 23:03:16.415000 audit[6521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=14197c420258 a2=98 a3=0 items=0 ppid=6510 pid=6521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363133326639303930663065316439333636303637336131 Jun 12 23:03:16.415000 audit: BPF prog-id=237 op=LOAD Jun 12 23:03:16.415000 audit[6521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=14197c41ff98 a2=98 a3=0 items=0 ppid=6510 pid=6521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363133326639303930663065316439333636303637336131 Jun 12 23:03:16.415000 audit: BPF prog-id=237 op=UNLOAD Jun 12 23:03:16.415000 audit[6521]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6510 pid=6521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363133326639303930663065316439333636303637336131 Jun 12 23:03:16.415000 audit: BPF prog-id=236 op=UNLOAD Jun 12 23:03:16.415000 audit[6521]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6510 pid=6521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363133326639303930663065316439333636303637336131 Jun 12 23:03:16.415000 audit: BPF prog-id=238 op=LOAD Jun 12 23:03:16.415000 audit[6521]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=14197c4204a8 a2=98 a3=0 items=0 ppid=6510 pid=6521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38363133326639303930663065316439333636303637336131 Jun 12 23:03:16.428637 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:16.436007 kernel: docker0: port 1(veth127aaac) entered blocking state Jun 12 23:03:16.436090 kernel: docker0: port 1(veth127aaac) entered disabled state Jun 12 23:03:16.438991 kernel: veth127aaac: entered allmulticast mode Jun 12 23:03:16.441926 kernel: veth127aaac: entered promiscuous mode Jun 12 23:03:16.427000 audit: ANOM_PROMISCUOUS dev=veth127aaac prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:16.427000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52e270 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.427000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:16.443000 audit[6544]: NETFILTER_CFG table=raw:113 family=2 entries=1 op=nft_register_rule pid=6544 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:16.443000 audit[6544]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff6a03370 a2=0 a3=0 items=0 ppid=2935 pid=6544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:16.443000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:16.445091 systemd-networkd[2176]: veth127aaac: Link UP Jun 12 23:03:16.461795 kernel: eth0: renamed from vethc260fe9 Jun 12 23:03:16.461869 kernel: docker0: port 1(veth127aaac) entered blocking state Jun 12 23:03:16.461887 kernel: docker0: port 1(veth127aaac) entered forwarding state Jun 12 23:03:16.465444 systemd-networkd[2176]: veth127aaac: Gained carrier Jun 12 23:03:16.466197 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:16.548369 systemd[1]: Started sshd@36-28-10.0.0.35:22-43.160.253.60:40906.service - OpenSSH per-connection server daemon (43.160.253.60:40906). Jun 12 23:03:16.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-28-10.0.0.35:22-43.160.253.60:40906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:17.057891 sshd[6553]: Invalid user grid from 43.160.253.60 port 40906 Jun 12 23:03:17.219530 sshd[6553]: Connection closed by invalid user grid 43.160.253.60 port 40906 [preauth] Jun 12 23:03:17.218000 audit[6553]: AUDIT1109 pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:17.221019 systemd[1]: sshd@36-28-10.0.0.35:22-43.160.253.60:40906.service: Deactivated successfully. Jun 12 23:03:17.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-28-10.0.0.35:22-43.160.253.60:40906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:17.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-29-10.0.0.35:22-43.160.253.60:40916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:17.390644 systemd[1]: Started sshd@37-29-10.0.0.35:22-43.160.253.60:40916.service - OpenSSH per-connection server daemon (43.160.253.60:40916). Jun 12 23:03:17.495449 systemd[1]: docker-86132f9090f0e1d93660673a111ab0d599a96a64e861574116e27216ea058a61.scope: Deactivated successfully. Jun 12 23:03:17.507420 dockerd[2935]: time="2026-06-12T23:03:17.507385009Z" level=info msg="ignoring event" container=86132f9090f0e1d93660673a111ab0d599a96a64e861574116e27216ea058a61 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:17.507739 containerd[2455]: time="2026-06-12T23:03:17.507604854Z" level=info msg="shim disconnected" id=86132f9090f0e1d93660673a111ab0d599a96a64e861574116e27216ea058a61 namespace=moby Jun 12 23:03:17.507739 containerd[2455]: time="2026-06-12T23:03:17.507648652Z" level=info msg="cleaning up after shim disconnected" id=86132f9090f0e1d93660673a111ab0d599a96a64e861574116e27216ea058a61 namespace=moby Jun 12 23:03:17.507739 containerd[2455]: time="2026-06-12T23:03:17.507655052Z" level=info msg="cleaning up dead shim" id=86132f9090f0e1d93660673a111ab0d599a96a64e861574116e27216ea058a61 namespace=moby Jun 12 23:03:17.530611 systemd-networkd[2176]: veth127aaac: Lost carrier Jun 12 23:03:17.531435 kernel: docker0: port 1(veth127aaac) entered disabled state Jun 12 23:03:17.534800 kernel: vethc260fe9: renamed from eth0 Jun 12 23:03:17.549000 audit[6585]: NETFILTER_CFG table=raw:114 family=2 entries=1 op=nft_unregister_rule pid=6585 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:17.549000 audit[6585]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff8dfdb60 a2=0 a3=0 items=0 ppid=2935 pid=6585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.549000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:17.559178 systemd-networkd[2176]: veth127aaac: Link DOWN Jun 12 23:03:17.566309 kernel: docker0: port 1(veth127aaac) entered disabled state Jun 12 23:03:17.566364 kernel: veth127aaac (unregistering): left allmulticast mode Jun 12 23:03:17.570223 kernel: veth127aaac (unregistering): left promiscuous mode Jun 12 23:03:17.558000 audit: ANOM_PROMISCUOUS dev=veth127aaac prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:17.573633 kernel: docker0: port 1(veth127aaac) entered disabled state Jun 12 23:03:17.558000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb19c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.558000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:17.589347 systemd[1]: run-docker-netns-5d9a66ecc5e0.mount: Deactivated successfully. Jun 12 23:03:17.591948 systemd[1]: var-lib-docker-overlay2-4bbadd4cf9307205e710d5d3108a501958378078c05fec3dc218175f2b551e01-merged.mount: Deactivated successfully. Jun 12 23:03:17.603000 audit: BPF prog-id=234 op=UNLOAD Jun 12 23:03:17.603000 audit: BPF prog-id=238 op=UNLOAD Jun 12 23:03:17.769519 containerd[2455]: time="2026-06-12T23:03:17.769108618Z" level=info msg="connecting to shim fbc563101aa2f8189ac5234a584ed52937d61934578da67a38e187dbe0b72872" address="unix:///run/containerd/s/d7506e342a4e36a868d7e6c526f62b92e91a66caf99f33b061559e65877ed60d" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:17.786930 systemd[1]: Started docker-fbc563101aa2f8189ac5234a584ed52937d61934578da67a38e187dbe0b72872.scope - libcontainer container fbc563101aa2f8189ac5234a584ed52937d61934578da67a38e187dbe0b72872. Jun 12 23:03:17.794000 audit: BPF prog-id=239 op=LOAD Jun 12 23:03:17.794000 audit: BPF prog-id=240 op=LOAD Jun 12 23:03:17.794000 audit[6615]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=336c6fa8df80 a2=98 a3=0 items=0 ppid=6604 pid=6615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66626335363331303161613266383138396163353233346135 Jun 12 23:03:17.795000 audit: BPF prog-id=240 op=UNLOAD Jun 12 23:03:17.795000 audit[6615]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6604 pid=6615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66626335363331303161613266383138396163353233346135 Jun 12 23:03:17.795000 audit: BPF prog-id=241 op=LOAD Jun 12 23:03:17.795000 audit[6615]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=336c6fa8e258 a2=98 a3=0 items=0 ppid=6604 pid=6615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66626335363331303161613266383138396163353233346135 Jun 12 23:03:17.795000 audit: BPF prog-id=242 op=LOAD Jun 12 23:03:17.795000 audit[6615]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=336c6fa8df98 a2=98 a3=0 items=0 ppid=6604 pid=6615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66626335363331303161613266383138396163353233346135 Jun 12 23:03:17.795000 audit: BPF prog-id=242 op=UNLOAD Jun 12 23:03:17.795000 audit[6615]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6604 pid=6615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66626335363331303161613266383138396163353233346135 Jun 12 23:03:17.795000 audit: BPF prog-id=241 op=UNLOAD Jun 12 23:03:17.795000 audit[6615]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6604 pid=6615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66626335363331303161613266383138396163353233346135 Jun 12 23:03:17.796000 audit: BPF prog-id=243 op=LOAD Jun 12 23:03:17.796000 audit[6615]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=336c6fa8e4a8 a2=98 a3=0 items=0 ppid=6604 pid=6615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66626335363331303161613266383138396163353233346135 Jun 12 23:03:17.815245 kernel: docker0: port 1(veth5b3514a) entered blocking state Jun 12 23:03:17.815326 kernel: docker0: port 1(veth5b3514a) entered disabled state Jun 12 23:03:17.818059 kernel: veth5b3514a: entered allmulticast mode Jun 12 23:03:17.820973 kernel: veth5b3514a: entered promiscuous mode Jun 12 23:03:17.806000 audit: ANOM_PROMISCUOUS dev=veth5b3514a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:17.806000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b482300 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.806000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:17.821611 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:17.822000 audit[6636]: NETFILTER_CFG table=raw:115 family=2 entries=1 op=nft_register_rule pid=6636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:17.822000 audit[6636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffbcb3a60 a2=0 a3=0 items=0 ppid=2935 pid=6636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:17.822000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:17.823915 systemd-networkd[2176]: veth5b3514a: Link UP Jun 12 23:03:17.839792 kernel: eth0: renamed from veth7fc84a4 Jun 12 23:03:17.847095 kernel: docker0: port 1(veth5b3514a) entered blocking state Jun 12 23:03:17.847160 kernel: docker0: port 1(veth5b3514a) entered forwarding state Jun 12 23:03:17.847369 systemd-networkd[2176]: veth5b3514a: Gained carrier Jun 12 23:03:17.847571 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:17.903138 sshd[6559]: Invalid user debian from 43.160.253.60 port 40916 Jun 12 23:03:18.065910 sshd[6559]: Connection closed by invalid user debian 43.160.253.60 port 40916 [preauth] Jun 12 23:03:18.065000 audit[6559]: AUDIT1109 pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:18.067927 systemd[1]: sshd@37-29-10.0.0.35:22-43.160.253.60:40916.service: Deactivated successfully. Jun 12 23:03:18.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-29-10.0.0.35:22-43.160.253.60:40916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:18.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-4106-10.0.0.35:22-43.160.253.60:40928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:18.236258 systemd[1]: Started sshd@38-4106-10.0.0.35:22-43.160.253.60:40928.service - OpenSSH per-connection server daemon (43.160.253.60:40928). Jun 12 23:03:18.881894 systemd[1]: docker-fbc563101aa2f8189ac5234a584ed52937d61934578da67a38e187dbe0b72872.scope: Deactivated successfully. Jun 12 23:03:18.892877 containerd[2455]: time="2026-06-12T23:03:18.892841858Z" level=info msg="shim disconnected" id=fbc563101aa2f8189ac5234a584ed52937d61934578da67a38e187dbe0b72872 namespace=moby Jun 12 23:03:18.892877 containerd[2455]: time="2026-06-12T23:03:18.892871881Z" level=info msg="cleaning up after shim disconnected" id=fbc563101aa2f8189ac5234a584ed52937d61934578da67a38e187dbe0b72872 namespace=moby Jun 12 23:03:18.892877 containerd[2455]: time="2026-06-12T23:03:18.892877720Z" level=info msg="cleaning up dead shim" id=fbc563101aa2f8189ac5234a584ed52937d61934578da67a38e187dbe0b72872 namespace=moby Jun 12 23:03:18.905672 sshd[6648]: Connection closed by authenticating user root 43.160.253.60 port 40928 [preauth] Jun 12 23:03:18.905000 audit[6648]: AUDIT1109 pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:18.909656 kernel: kauditd_printk_skb: 116 callbacks suppressed Jun 12 23:03:18.909730 kernel: audit: type=1109 audit(1781305398.905:975): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:18.910124 systemd[1]: sshd@38-4106-10.0.0.35:22-43.160.253.60:40928.service: Deactivated successfully. Jun 12 23:03:18.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-4106-10.0.0.35:22-43.160.253.60:40928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:18.936297 kernel: audit: type=1131 audit(1781305398.909:976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-4106-10.0.0.35:22-43.160.253.60:40928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:18.942156 kernel: docker0: port 1(veth5b3514a) entered disabled state Jun 12 23:03:18.942256 systemd-networkd[2176]: veth5b3514a: Lost carrier Jun 12 23:03:18.945516 kernel: veth7fc84a4: renamed from eth0 Jun 12 23:03:18.958000 audit[6676]: NETFILTER_CFG table=raw:116 family=2 entries=1 op=nft_unregister_rule pid=6676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:18.958000 audit[6676]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdafc6d70 a2=0 a3=0 items=0 ppid=2935 pid=6676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:18.985540 kernel: audit: type=1325 audit(1781305398.958:977): table=raw:116 family=2 entries=1 op=nft_unregister_rule pid=6676 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:18.985587 kernel: audit: type=1300 audit(1781305398.958:977): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdafc6d70 a2=0 a3=0 items=0 ppid=2935 pid=6676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:18.958000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:18.997541 kernel: audit: type=1327 audit(1781305398.958:977): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:18.998248 systemd-networkd[2176]: veth5b3514a: Link DOWN Jun 12 23:03:19.002145 kernel: docker0: port 1(veth5b3514a) entered disabled state Jun 12 23:03:19.010021 kernel: veth5b3514a (unregistering): left allmulticast mode Jun 12 23:03:19.010073 kernel: veth5b3514a (unregistering): left promiscuous mode Jun 12 23:03:18.985000 audit: ANOM_PROMISCUOUS dev=veth5b3514a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:19.014009 kernel: docker0: port 1(veth5b3514a) entered disabled state Jun 12 23:03:19.014040 kernel: audit: type=1700 audit(1781305398.985:978): dev=veth5b3514a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:18.985000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6a00 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:18.985000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:19.042880 kernel: audit: type=1300 audit(1781305398.985:978): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6a00 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:19.042926 kernel: audit: type=1327 audit(1781305398.985:978): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:19.059221 systemd[1]: run-docker-netns-af97f7c14db2.mount: Deactivated successfully. Jun 12 23:03:19.062228 systemd[1]: var-lib-docker-overlay2-5c3a9e3345abe5bb2843ac56dcac6ca0143844fe9280177854d591b0e86fbad7-merged.mount: Deactivated successfully. Jun 12 23:03:19.075000 audit: BPF prog-id=239 op=UNLOAD Jun 12 23:03:19.075000 audit: BPF prog-id=243 op=UNLOAD Jun 12 23:03:19.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-30-10.0.0.35:22-43.160.253.60:40936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:19.088415 kernel: audit: type=1334 audit(1781305399.075:979): prog-id=239 op=UNLOAD Jun 12 23:03:19.084690 systemd[1]: Started sshd@39-30-10.0.0.35:22-43.160.253.60:40936.service - OpenSSH per-connection server daemon (43.160.253.60:40936). Jun 12 23:03:19.088550 kernel: audit: type=1334 audit(1781305399.075:980): prog-id=243 op=UNLOAD Jun 12 23:03:19.143201 systemd[1]: var-lib-docker-overlay2-4dd995f85ffe8e0f71f3b5ac87cc4946f5d93c03cbca0e7fbd8b89724ba976e6\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:19.206486 containerd[2455]: time="2026-06-12T23:03:19.206423585Z" level=info msg="connecting to shim fec6f196bb67ee571779265f56d72fa79ed1d113b34a4490b2e0c58d9a40a2e2" address="unix:///run/containerd/s/ae02d917a2293c83588f226c89091d5593493ce3be8533c06a900e8d53b9b074" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:19.225120 systemd[1]: Started docker-fec6f196bb67ee571779265f56d72fa79ed1d113b34a4490b2e0c58d9a40a2e2.scope - libcontainer container fec6f196bb67ee571779265f56d72fa79ed1d113b34a4490b2e0c58d9a40a2e2. Jun 12 23:03:19.232000 audit: BPF prog-id=244 op=LOAD Jun 12 23:03:19.232000 audit: BPF prog-id=245 op=LOAD Jun 12 23:03:19.232000 audit[6708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=237046aa7f80 a2=98 a3=0 items=0 ppid=6696 pid=6708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:19.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66656336663139366262363765653537313737393236356635 Jun 12 23:03:19.232000 audit: BPF prog-id=245 op=UNLOAD Jun 12 23:03:19.232000 audit[6708]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6696 pid=6708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:19.232000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66656336663139366262363765653537313737393236356635 Jun 12 23:03:19.233000 audit: BPF prog-id=246 op=LOAD Jun 12 23:03:19.233000 audit[6708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=237046aa8258 a2=98 a3=0 items=0 ppid=6696 pid=6708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:19.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66656336663139366262363765653537313737393236356635 Jun 12 23:03:19.233000 audit: BPF prog-id=247 op=LOAD Jun 12 23:03:19.233000 audit[6708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=237046aa7f98 a2=98 a3=0 items=0 ppid=6696 pid=6708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:19.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66656336663139366262363765653537313737393236356635 Jun 12 23:03:19.233000 audit: BPF prog-id=247 op=UNLOAD Jun 12 23:03:19.233000 audit[6708]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6696 pid=6708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:19.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66656336663139366262363765653537313737393236356635 Jun 12 23:03:19.233000 audit: BPF prog-id=246 op=UNLOAD Jun 12 23:03:19.233000 audit[6708]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6696 pid=6708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:19.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66656336663139366262363765653537313737393236356635 Jun 12 23:03:19.233000 audit: BPF prog-id=248 op=LOAD Jun 12 23:03:19.233000 audit[6708]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=237046aa84a8 a2=98 a3=0 items=0 ppid=6696 pid=6708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:19.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66656336663139366262363765653537313737393236356635 Jun 12 23:03:19.248976 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:19.256137 kernel: docker0: port 1(veth382c2f4) entered blocking state Jun 12 23:03:19.256212 kernel: docker0: port 1(veth382c2f4) entered disabled state Jun 12 23:03:19.259467 kernel: veth382c2f4: entered allmulticast mode Jun 12 23:03:19.262377 kernel: veth382c2f4: entered promiscuous mode Jun 12 23:03:19.247000 audit: ANOM_PROMISCUOUS dev=veth382c2f4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:19.247000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0c120 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:19.247000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:19.263000 audit[6730]: NETFILTER_CFG table=raw:117 family=2 entries=1 op=nft_register_rule pid=6730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:19.263000 audit[6730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe4d85dc0 a2=0 a3=0 items=0 ppid=2935 pid=6730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:19.263000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:19.266844 systemd-networkd[2176]: veth382c2f4: Link UP Jun 12 23:03:19.282858 kernel: eth0: renamed from vetha9ceedb Jun 12 23:03:19.282918 kernel: docker0: port 1(veth382c2f4) entered blocking state Jun 12 23:03:19.287323 kernel: docker0: port 1(veth382c2f4) entered forwarding state Jun 12 23:03:19.287689 systemd-networkd[2176]: veth382c2f4: Gained carrier Jun 12 23:03:19.288338 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:19.594592 sshd[6678]: Invalid user odoo from 43.160.253.60 port 40936 Jun 12 23:03:19.757184 sshd[6678]: Connection closed by invalid user odoo 43.160.253.60 port 40936 [preauth] Jun 12 23:03:19.756000 audit[6678]: AUDIT1109 pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:19.758889 systemd[1]: sshd@39-30-10.0.0.35:22-43.160.253.60:40936.service: Deactivated successfully. Jun 12 23:03:19.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-30-10.0.0.35:22-43.160.253.60:40936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:19.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-31-10.0.0.35:22-43.160.253.60:40938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:19.929046 systemd[1]: Started sshd@40-31-10.0.0.35:22-43.160.253.60:40938.service - OpenSSH per-connection server daemon (43.160.253.60:40938). Jun 12 23:03:20.312661 systemd[1]: docker-fec6f196bb67ee571779265f56d72fa79ed1d113b34a4490b2e0c58d9a40a2e2.scope: Deactivated successfully. Jun 12 23:03:20.322983 containerd[2455]: time="2026-06-12T23:03:20.322954688Z" level=info msg="shim disconnected" id=fec6f196bb67ee571779265f56d72fa79ed1d113b34a4490b2e0c58d9a40a2e2 namespace=moby Jun 12 23:03:20.323365 dockerd[2935]: time="2026-06-12T23:03:20.323070226Z" level=info msg="ignoring event" container=fec6f196bb67ee571779265f56d72fa79ed1d113b34a4490b2e0c58d9a40a2e2 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:20.323850 containerd[2455]: time="2026-06-12T23:03:20.323594615Z" level=info msg="cleaning up after shim disconnected" id=fec6f196bb67ee571779265f56d72fa79ed1d113b34a4490b2e0c58d9a40a2e2 namespace=moby Jun 12 23:03:20.323850 containerd[2455]: time="2026-06-12T23:03:20.323789069Z" level=info msg="cleaning up dead shim" id=fec6f196bb67ee571779265f56d72fa79ed1d113b34a4490b2e0c58d9a40a2e2 namespace=moby Jun 12 23:03:20.346624 systemd-networkd[2176]: veth382c2f4: Lost carrier Jun 12 23:03:20.347397 kernel: docker0: port 1(veth382c2f4) entered disabled state Jun 12 23:03:20.350804 kernel: vetha9ceedb: renamed from eth0 Jun 12 23:03:20.364000 audit[6767]: NETFILTER_CFG table=raw:118 family=2 entries=1 op=nft_unregister_rule pid=6767 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:20.364000 audit[6767]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd3519c80 a2=0 a3=0 items=0 ppid=2935 pid=6767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.364000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:20.374193 systemd-networkd[2176]: veth382c2f4: Link DOWN Jun 12 23:03:20.382507 kernel: docker0: port 1(veth382c2f4) entered disabled state Jun 12 23:03:20.382577 kernel: veth382c2f4 (unregistering): left allmulticast mode Jun 12 23:03:20.385957 kernel: veth382c2f4 (unregistering): left promiscuous mode Jun 12 23:03:20.373000 audit: ANOM_PROMISCUOUS dev=veth382c2f4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:20.389762 kernel: docker0: port 1(veth382c2f4) entered disabled state Jun 12 23:03:20.373000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8dbec0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.373000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:20.402748 systemd[1]: run-docker-netns-e9ec7faa74dc.mount: Deactivated successfully. Jun 12 23:03:20.406464 systemd[1]: var-lib-docker-overlay2-4dd995f85ffe8e0f71f3b5ac87cc4946f5d93c03cbca0e7fbd8b89724ba976e6-merged.mount: Deactivated successfully. Jun 12 23:03:20.420000 audit: BPF prog-id=244 op=UNLOAD Jun 12 23:03:20.420000 audit: BPF prog-id=248 op=UNLOAD Jun 12 23:03:20.441392 sshd[6741]: Invalid user ftpuser from 43.160.253.60 port 40938 Jun 12 23:03:20.554275 containerd[2455]: time="2026-06-12T23:03:20.553875384Z" level=info msg="connecting to shim 9f6eb612e04cb3769d7ce96f17aef1de34a14c12f6ba77c48b87cfb32c8a1403" address="unix:///run/containerd/s/a51c39ad59b74b35bc01ac05724784443616234ea0da3d6618614f5a586bd26a" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:20.572940 systemd[1]: Started docker-9f6eb612e04cb3769d7ce96f17aef1de34a14c12f6ba77c48b87cfb32c8a1403.scope - libcontainer container 9f6eb612e04cb3769d7ce96f17aef1de34a14c12f6ba77c48b87cfb32c8a1403. Jun 12 23:03:20.580000 audit: BPF prog-id=249 op=LOAD Jun 12 23:03:20.581000 audit: BPF prog-id=250 op=LOAD Jun 12 23:03:20.581000 audit[6795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=45d3f246bf80 a2=98 a3=0 items=0 ppid=6784 pid=6795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663665623631326530346362333736396437636539366631 Jun 12 23:03:20.581000 audit: BPF prog-id=250 op=UNLOAD Jun 12 23:03:20.581000 audit[6795]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6784 pid=6795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663665623631326530346362333736396437636539366631 Jun 12 23:03:20.581000 audit: BPF prog-id=251 op=LOAD Jun 12 23:03:20.581000 audit[6795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=45d3f246c258 a2=98 a3=0 items=0 ppid=6784 pid=6795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663665623631326530346362333736396437636539366631 Jun 12 23:03:20.581000 audit: BPF prog-id=252 op=LOAD Jun 12 23:03:20.581000 audit[6795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=45d3f246bf98 a2=98 a3=0 items=0 ppid=6784 pid=6795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663665623631326530346362333736396437636539366631 Jun 12 23:03:20.582000 audit: BPF prog-id=252 op=UNLOAD Jun 12 23:03:20.582000 audit[6795]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6784 pid=6795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663665623631326530346362333736396437636539366631 Jun 12 23:03:20.582000 audit: BPF prog-id=251 op=UNLOAD Jun 12 23:03:20.582000 audit[6795]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6784 pid=6795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663665623631326530346362333736396437636539366631 Jun 12 23:03:20.582000 audit: BPF prog-id=253 op=LOAD Jun 12 23:03:20.582000 audit[6795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=45d3f246c4a8 a2=98 a3=0 items=0 ppid=6784 pid=6795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39663665623631326530346362333736396437636539366631 Jun 12 23:03:20.596472 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:20.603678 kernel: docker0: port 1(vethd36ad7b) entered blocking state Jun 12 23:03:20.603750 kernel: docker0: port 1(vethd36ad7b) entered disabled state Jun 12 23:03:20.604027 sshd[6741]: Connection closed by invalid user ftpuser 43.160.253.60 port 40938 [preauth] Jun 12 23:03:20.606756 kernel: vethd36ad7b: entered allmulticast mode Jun 12 23:03:20.609692 kernel: vethd36ad7b: entered promiscuous mode Jun 12 23:03:20.595000 audit: ANOM_PROMISCUOUS dev=vethd36ad7b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:20.610000 audit[6741]: AUDIT1109 pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:20.595000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0c7b0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.595000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:20.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-31-10.0.0.35:22-43.160.253.60:40938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:20.612805 systemd[1]: sshd@40-31-10.0.0.35:22-43.160.253.60:40938.service: Deactivated successfully. Jun 12 23:03:20.615000 audit[6819]: NETFILTER_CFG table=raw:119 family=2 entries=1 op=nft_register_rule pid=6819 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:20.615000 audit[6819]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdfef19a0 a2=0 a3=0 items=0 ppid=2935 pid=6819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:20.615000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:20.618856 systemd-networkd[2176]: vethd36ad7b: Link UP Jun 12 23:03:20.632797 kernel: eth0: renamed from veth14251bc Jun 12 23:03:20.640094 kernel: docker0: port 1(vethd36ad7b) entered blocking state Jun 12 23:03:20.640149 kernel: docker0: port 1(vethd36ad7b) entered forwarding state Jun 12 23:03:20.640557 systemd-networkd[2176]: vethd36ad7b: Gained carrier Jun 12 23:03:20.641330 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:20.775300 systemd[1]: Started sshd@41-32-10.0.0.35:22-43.160.253.60:40944.service - OpenSSH per-connection server daemon (43.160.253.60:40944). Jun 12 23:03:20.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-32-10.0.0.35:22-43.160.253.60:40944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:21.288375 sshd[6829]: Invalid user postgres from 43.160.253.60 port 40944 Jun 12 23:03:21.450899 sshd[6829]: Connection closed by invalid user postgres 43.160.253.60 port 40944 [preauth] Jun 12 23:03:21.450000 audit[6829]: AUDIT1109 pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:21.452694 systemd[1]: sshd@41-32-10.0.0.35:22-43.160.253.60:40944.service: Deactivated successfully. Jun 12 23:03:21.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-32-10.0.0.35:22-43.160.253.60:40944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:21.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-33-10.0.0.35:22-43.160.253.60:40954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:21.622034 systemd[1]: Started sshd@42-33-10.0.0.35:22-43.160.253.60:40954.service - OpenSSH per-connection server daemon (43.160.253.60:40954). Jun 12 23:03:21.664297 systemd[1]: docker-9f6eb612e04cb3769d7ce96f17aef1de34a14c12f6ba77c48b87cfb32c8a1403.scope: Deactivated successfully. Jun 12 23:03:21.676407 dockerd[2935]: time="2026-06-12T23:03:21.676369525Z" level=info msg="ignoring event" container=9f6eb612e04cb3769d7ce96f17aef1de34a14c12f6ba77c48b87cfb32c8a1403 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:21.676855 containerd[2455]: time="2026-06-12T23:03:21.676754618Z" level=info msg="shim disconnected" id=9f6eb612e04cb3769d7ce96f17aef1de34a14c12f6ba77c48b87cfb32c8a1403 namespace=moby Jun 12 23:03:21.677215 containerd[2455]: time="2026-06-12T23:03:21.677078963Z" level=info msg="cleaning up after shim disconnected" id=9f6eb612e04cb3769d7ce96f17aef1de34a14c12f6ba77c48b87cfb32c8a1403 namespace=moby Jun 12 23:03:21.677215 containerd[2455]: time="2026-06-12T23:03:21.677098690Z" level=info msg="cleaning up dead shim" id=9f6eb612e04cb3769d7ce96f17aef1de34a14c12f6ba77c48b87cfb32c8a1403 namespace=moby Jun 12 23:03:21.698683 systemd-networkd[2176]: vethd36ad7b: Lost carrier Jun 12 23:03:21.699068 kernel: docker0: port 1(vethd36ad7b) entered disabled state Jun 12 23:03:21.701794 kernel: veth14251bc: renamed from eth0 Jun 12 23:03:21.718000 audit[6862]: NETFILTER_CFG table=raw:120 family=2 entries=1 op=nft_unregister_rule pid=6862 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:21.718000 audit[6862]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe87f3e30 a2=0 a3=0 items=0 ppid=2935 pid=6862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.718000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:21.725135 systemd-networkd[2176]: vethd36ad7b: Link DOWN Jun 12 23:03:21.728905 kernel: docker0: port 1(vethd36ad7b) entered disabled state Jun 12 23:03:21.736637 kernel: vethd36ad7b (unregistering): left allmulticast mode Jun 12 23:03:21.736691 kernel: vethd36ad7b (unregistering): left promiscuous mode Jun 12 23:03:21.724000 audit: ANOM_PROMISCUOUS dev=vethd36ad7b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:21.739968 kernel: docker0: port 1(vethd36ad7b) entered disabled state Jun 12 23:03:21.724000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6da0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.724000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:21.752017 systemd[1]: run-docker-netns-50e2d00462bb.mount: Deactivated successfully. Jun 12 23:03:21.755700 systemd[1]: var-lib-docker-overlay2-f4a06388be599aa3733f2b6d701fb26a903974bea157a8a8ec9678a5ab910cc0-merged.mount: Deactivated successfully. Jun 12 23:03:21.766000 audit: BPF prog-id=249 op=UNLOAD Jun 12 23:03:21.766000 audit: BPF prog-id=253 op=UNLOAD Jun 12 23:03:21.836035 systemd[1]: var-lib-docker-overlay2-796f60cfaf9b771225baa383dc002719e60f2fd5b5e316aca36c083b0b704c0b\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:21.900142 containerd[2455]: time="2026-06-12T23:03:21.899756923Z" level=info msg="connecting to shim 9b59223e9ab3ef478f0153d2f811aac23f906854b54620c074dd2547d7f11b3b" address="unix:///run/containerd/s/4f80445f9404c7af713886611b4896b6f01f45eaa13718df3836ff10a3e3b9e2" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:21.919931 systemd[1]: Started docker-9b59223e9ab3ef478f0153d2f811aac23f906854b54620c074dd2547d7f11b3b.scope - libcontainer container 9b59223e9ab3ef478f0153d2f811aac23f906854b54620c074dd2547d7f11b3b. Jun 12 23:03:21.926000 audit: BPF prog-id=254 op=LOAD Jun 12 23:03:21.927000 audit: BPF prog-id=255 op=LOAD Jun 12 23:03:21.927000 audit[6889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=707e15ebff80 a2=98 a3=0 items=0 ppid=6879 pid=6889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39623539323233653961623365663437386630313533643266 Jun 12 23:03:21.927000 audit: BPF prog-id=255 op=UNLOAD Jun 12 23:03:21.927000 audit[6889]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6879 pid=6889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39623539323233653961623365663437386630313533643266 Jun 12 23:03:21.927000 audit: BPF prog-id=256 op=LOAD Jun 12 23:03:21.927000 audit[6889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=707e15ec0258 a2=98 a3=0 items=0 ppid=6879 pid=6889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39623539323233653961623365663437386630313533643266 Jun 12 23:03:21.927000 audit: BPF prog-id=257 op=LOAD Jun 12 23:03:21.927000 audit[6889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=707e15ebff98 a2=98 a3=0 items=0 ppid=6879 pid=6889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39623539323233653961623365663437386630313533643266 Jun 12 23:03:21.927000 audit: BPF prog-id=257 op=UNLOAD Jun 12 23:03:21.927000 audit[6889]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6879 pid=6889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39623539323233653961623365663437386630313533643266 Jun 12 23:03:21.927000 audit: BPF prog-id=256 op=UNLOAD Jun 12 23:03:21.927000 audit[6889]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6879 pid=6889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39623539323233653961623365663437386630313533643266 Jun 12 23:03:21.927000 audit: BPF prog-id=258 op=LOAD Jun 12 23:03:21.927000 audit[6889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=707e15ec04a8 a2=98 a3=0 items=0 ppid=6879 pid=6889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39623539323233653961623365663437386630313533643266 Jun 12 23:03:21.940256 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:21.946830 kernel: docker0: port 1(veth4ad3d77) entered blocking state Jun 12 23:03:21.946896 kernel: docker0: port 1(veth4ad3d77) entered disabled state Jun 12 23:03:21.949597 kernel: veth4ad3d77: entered allmulticast mode Jun 12 23:03:21.952790 kernel: veth4ad3d77: entered promiscuous mode Jun 12 23:03:21.939000 audit: ANOM_PROMISCUOUS dev=veth4ad3d77 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:21.939000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0d7a0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.939000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:21.953000 audit[6910]: NETFILTER_CFG table=raw:121 family=2 entries=1 op=nft_register_rule pid=6910 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:21.953000 audit[6910]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff9b5fba0 a2=0 a3=0 items=0 ppid=2935 pid=6910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:21.953000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:21.955154 systemd-networkd[2176]: veth4ad3d77: Link UP Jun 12 23:03:21.968803 kernel: eth0: renamed from veth95f8ede Jun 12 23:03:21.968875 kernel: docker0: port 1(veth4ad3d77) entered blocking state Jun 12 23:03:21.975398 kernel: docker0: port 1(veth4ad3d77) entered forwarding state Jun 12 23:03:21.975719 systemd-networkd[2176]: veth4ad3d77: Gained carrier Jun 12 23:03:21.975934 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:22.138489 sshd[6835]: Invalid user ubuntu from 43.160.253.60 port 40954 Jun 12 23:03:22.299924 sshd[6835]: Connection closed by invalid user ubuntu 43.160.253.60 port 40954 [preauth] Jun 12 23:03:22.299000 audit[6835]: AUDIT1109 pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:22.301483 systemd[1]: sshd@42-33-10.0.0.35:22-43.160.253.60:40954.service: Deactivated successfully. Jun 12 23:03:22.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-33-10.0.0.35:22-43.160.253.60:40954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:22.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-34-10.0.0.35:22-43.160.253.60:40968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:22.473045 systemd[1]: Started sshd@43-34-10.0.0.35:22-43.160.253.60:40968.service - OpenSSH per-connection server daemon (43.160.253.60:40968). Jun 12 23:03:22.983501 sshd[6921]: Invalid user guest from 43.160.253.60 port 40968 Jun 12 23:03:23.000593 systemd[1]: docker-9b59223e9ab3ef478f0153d2f811aac23f906854b54620c074dd2547d7f11b3b.scope: Deactivated successfully. Jun 12 23:03:23.013181 dockerd[2935]: time="2026-06-12T23:03:23.013099288Z" level=info msg="ignoring event" container=9b59223e9ab3ef478f0153d2f811aac23f906854b54620c074dd2547d7f11b3b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:23.014072 containerd[2455]: time="2026-06-12T23:03:23.014028083Z" level=info msg="shim disconnected" id=9b59223e9ab3ef478f0153d2f811aac23f906854b54620c074dd2547d7f11b3b namespace=moby Jun 12 23:03:23.014290 containerd[2455]: time="2026-06-12T23:03:23.014085809Z" level=info msg="cleaning up after shim disconnected" id=9b59223e9ab3ef478f0153d2f811aac23f906854b54620c074dd2547d7f11b3b namespace=moby Jun 12 23:03:23.014290 containerd[2455]: time="2026-06-12T23:03:23.014093904Z" level=info msg="cleaning up dead shim" id=9b59223e9ab3ef478f0153d2f811aac23f906854b54620c074dd2547d7f11b3b namespace=moby Jun 12 23:03:23.038796 kernel: veth95f8ede: renamed from eth0 Jun 12 23:03:23.038876 kernel: docker0: port 1(veth4ad3d77) entered disabled state Jun 12 23:03:23.038938 systemd-networkd[2176]: veth4ad3d77: Lost carrier Jun 12 23:03:23.060000 audit[6947]: NETFILTER_CFG table=raw:122 family=2 entries=1 op=nft_unregister_rule pid=6947 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:23.060000 audit[6947]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcccd6580 a2=0 a3=0 items=0 ppid=2935 pid=6947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.060000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:23.066285 systemd-networkd[2176]: veth4ad3d77: Link DOWN Jun 12 23:03:23.070003 kernel: docker0: port 1(veth4ad3d77) entered disabled state Jun 12 23:03:23.077793 kernel: veth4ad3d77 (unregistering): left allmulticast mode Jun 12 23:03:23.077870 kernel: veth4ad3d77 (unregistering): left promiscuous mode Jun 12 23:03:23.065000 audit: ANOM_PROMISCUOUS dev=veth4ad3d77 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:23.081294 kernel: docker0: port 1(veth4ad3d77) entered disabled state Jun 12 23:03:23.065000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b4f1ae0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.065000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:23.093879 systemd[1]: run-docker-netns-df5f836815b0.mount: Deactivated successfully. Jun 12 23:03:23.096662 systemd[1]: var-lib-docker-overlay2-796f60cfaf9b771225baa383dc002719e60f2fd5b5e316aca36c083b0b704c0b-merged.mount: Deactivated successfully. Jun 12 23:03:23.104000 audit: BPF prog-id=254 op=UNLOAD Jun 12 23:03:23.104000 audit: BPF prog-id=258 op=UNLOAD Jun 12 23:03:23.144495 sshd[6921]: Connection closed by invalid user guest 43.160.253.60 port 40968 [preauth] Jun 12 23:03:23.144000 audit[6921]: AUDIT1109 pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:23.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-34-10.0.0.35:22-43.160.253.60:40968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:23.146560 systemd[1]: sshd@43-34-10.0.0.35:22-43.160.253.60:40968.service: Deactivated successfully. Jun 12 23:03:23.285883 containerd[2455]: time="2026-06-12T23:03:23.285181023Z" level=info msg="connecting to shim 7d2153294ff307806687656c6dd59e1f3ecdbf5f4402129bbad9140b78294d5d" address="unix:///run/containerd/s/deec160aa6f1ed18a1d2b09f463554bb3ba6c2ffe0f59b78d26d59ceccfe1ffa" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:23.306163 systemd[1]: Started docker-7d2153294ff307806687656c6dd59e1f3ecdbf5f4402129bbad9140b78294d5d.scope - libcontainer container 7d2153294ff307806687656c6dd59e1f3ecdbf5f4402129bbad9140b78294d5d. Jun 12 23:03:23.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4107-10.0.0.35:22-43.160.253.60:40976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:23.312916 systemd[1]: Started sshd@44-4107-10.0.0.35:22-43.160.253.60:40976.service - OpenSSH per-connection server daemon (43.160.253.60:40976). Jun 12 23:03:23.316000 audit: BPF prog-id=259 op=LOAD Jun 12 23:03:23.316000 audit: BPF prog-id=260 op=LOAD Jun 12 23:03:23.316000 audit[6978]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3e7edf3b7f80 a2=98 a3=0 items=0 ppid=6967 pid=6978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643231353332393466663330373830363638373635366336 Jun 12 23:03:23.316000 audit: BPF prog-id=260 op=UNLOAD Jun 12 23:03:23.316000 audit[6978]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6967 pid=6978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643231353332393466663330373830363638373635366336 Jun 12 23:03:23.316000 audit: BPF prog-id=261 op=LOAD Jun 12 23:03:23.316000 audit[6978]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3e7edf3b8258 a2=98 a3=0 items=0 ppid=6967 pid=6978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643231353332393466663330373830363638373635366336 Jun 12 23:03:23.317000 audit: BPF prog-id=262 op=LOAD Jun 12 23:03:23.317000 audit[6978]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3e7edf3b7f98 a2=98 a3=0 items=0 ppid=6967 pid=6978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643231353332393466663330373830363638373635366336 Jun 12 23:03:23.317000 audit: BPF prog-id=262 op=UNLOAD Jun 12 23:03:23.317000 audit[6978]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=6967 pid=6978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643231353332393466663330373830363638373635366336 Jun 12 23:03:23.317000 audit: BPF prog-id=261 op=UNLOAD Jun 12 23:03:23.317000 audit[6978]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6967 pid=6978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643231353332393466663330373830363638373635366336 Jun 12 23:03:23.317000 audit: BPF prog-id=263 op=LOAD Jun 12 23:03:23.317000 audit[6978]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3e7edf3b84a8 a2=98 a3=0 items=0 ppid=6967 pid=6978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37643231353332393466663330373830363638373635366336 Jun 12 23:03:23.341638 kernel: docker0: port 1(veth080782d) entered blocking state Jun 12 23:03:23.341723 kernel: docker0: port 1(veth080782d) entered disabled state Jun 12 23:03:23.344354 kernel: veth080782d: entered allmulticast mode Jun 12 23:03:23.347005 kernel: veth080782d: entered promiscuous mode Jun 12 23:03:23.333000 audit: ANOM_PROMISCUOUS dev=veth080782d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:23.333000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b945e00 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.333000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:23.348635 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:23.350000 audit[7003]: NETFILTER_CFG table=raw:123 family=2 entries=1 op=nft_register_rule pid=7003 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:23.350000 audit[7003]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc071f370 a2=0 a3=0 items=0 ppid=2935 pid=7003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:23.350000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:23.351458 systemd-networkd[2176]: veth080782d: Link UP Jun 12 23:03:23.368791 kernel: eth0: renamed from veth4a4063f Jun 12 23:03:23.372797 kernel: docker0: port 1(veth080782d) entered blocking state Jun 12 23:03:23.372859 kernel: docker0: port 1(veth080782d) entered forwarding state Jun 12 23:03:23.376285 systemd-networkd[2176]: veth080782d: Gained carrier Jun 12 23:03:23.376818 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:23.843659 sshd[6999]: Invalid user vpn from 43.160.253.60 port 40976 Jun 12 23:03:24.006274 sshd[6999]: Connection closed by invalid user vpn 43.160.253.60 port 40976 [preauth] Jun 12 23:03:24.005000 audit[6999]: AUDIT1109 pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:24.012940 kernel: kauditd_printk_skb: 152 callbacks suppressed Jun 12 23:03:24.008336 systemd[1]: sshd@44-4107-10.0.0.35:22-43.160.253.60:40976.service: Deactivated successfully. Jun 12 23:03:24.013224 kernel: audit: type=1109 audit(1781305404.005:1049): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:24.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4107-10.0.0.35:22-43.160.253.60:40976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:24.036765 kernel: audit: type=1131 audit(1781305404.007:1050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-4107-10.0.0.35:22-43.160.253.60:40976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:24.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-35-10.0.0.35:22-43.160.253.60:40980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:24.177035 systemd[1]: Started sshd@45-35-10.0.0.35:22-43.160.253.60:40980.service - OpenSSH per-connection server daemon (43.160.253.60:40980). Jun 12 23:03:24.191813 kernel: audit: type=1130 audit(1781305404.176:1051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-35-10.0.0.35:22-43.160.253.60:40980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:24.401511 systemd[1]: docker-7d2153294ff307806687656c6dd59e1f3ecdbf5f4402129bbad9140b78294d5d.scope: Deactivated successfully. Jun 12 23:03:24.413297 dockerd[2935]: time="2026-06-12T23:03:24.413224134Z" level=info msg="ignoring event" container=7d2153294ff307806687656c6dd59e1f3ecdbf5f4402129bbad9140b78294d5d module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:24.413957 containerd[2455]: time="2026-06-12T23:03:24.413925868Z" level=info msg="shim disconnected" id=7d2153294ff307806687656c6dd59e1f3ecdbf5f4402129bbad9140b78294d5d namespace=moby Jun 12 23:03:24.413957 containerd[2455]: time="2026-06-12T23:03:24.413954347Z" level=info msg="cleaning up after shim disconnected" id=7d2153294ff307806687656c6dd59e1f3ecdbf5f4402129bbad9140b78294d5d namespace=moby Jun 12 23:03:24.413957 containerd[2455]: time="2026-06-12T23:03:24.413960131Z" level=info msg="cleaning up dead shim" id=7d2153294ff307806687656c6dd59e1f3ecdbf5f4402129bbad9140b78294d5d namespace=moby Jun 12 23:03:24.435203 kernel: docker0: port 1(veth080782d) entered disabled state Jun 12 23:03:24.434917 systemd-networkd[2176]: veth080782d: Lost carrier Jun 12 23:03:24.438798 kernel: veth4a4063f: renamed from eth0 Jun 12 23:03:24.453000 audit[7041]: NETFILTER_CFG table=raw:124 family=2 entries=1 op=nft_unregister_rule pid=7041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:24.453000 audit[7041]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcf4e06d0 a2=0 a3=0 items=0 ppid=2935 pid=7041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.479202 kernel: audit: type=1325 audit(1781305404.453:1052): table=raw:124 family=2 entries=1 op=nft_unregister_rule pid=7041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:24.479260 kernel: audit: type=1300 audit(1781305404.453:1052): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcf4e06d0 a2=0 a3=0 items=0 ppid=2935 pid=7041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.453000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:24.490235 kernel: audit: type=1327 audit(1781305404.453:1052): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:24.491277 systemd-networkd[2176]: veth080782d: Link DOWN Jun 12 23:03:24.499481 kernel: docker0: port 1(veth080782d) entered disabled state Jun 12 23:03:24.499529 kernel: veth080782d (unregistering): left allmulticast mode Jun 12 23:03:24.502827 kernel: veth080782d (unregistering): left promiscuous mode Jun 12 23:03:24.506563 kernel: docker0: port 1(veth080782d) entered disabled state Jun 12 23:03:24.490000 audit: ANOM_PROMISCUOUS dev=veth080782d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:24.507889 kernel: audit: type=1700 audit(1781305404.490:1053): dev=veth080782d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:24.490000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe940 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.490000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:24.552981 kernel: audit: type=1300 audit(1781305404.490:1053): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe940 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.553186 kernel: audit: type=1327 audit(1781305404.490:1053): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:24.555996 systemd[1]: run-docker-netns-23c5a7310418.mount: Deactivated successfully. Jun 12 23:03:24.564758 systemd[1]: var-lib-docker-overlay2-75d65d0cada5fbb32f14262e558d49d0fcdcce2f28f678d2e592e95c52f58e68-merged.mount: Deactivated successfully. Jun 12 23:03:24.567000 audit: BPF prog-id=259 op=UNLOAD Jun 12 23:03:24.567000 audit: BPF prog-id=263 op=UNLOAD Jun 12 23:03:24.572830 kernel: audit: type=1334 audit(1781305404.567:1054): prog-id=259 op=UNLOAD Jun 12 23:03:24.640657 systemd[1]: var-lib-docker-overlay2-82d89f5a1fb820e914056b8ca8ea4cfe200d613c294611e8c431237bdd544e7e\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:24.700598 sshd[7015]: Invalid user db2fenc1 from 43.160.253.60 port 40980 Jun 12 23:03:24.701443 containerd[2455]: time="2026-06-12T23:03:24.701106634Z" level=info msg="connecting to shim 34e7000cffb97d21e8e59c6b42dfe81a8fe45f865f37617b63d16aa17166ff46" address="unix:///run/containerd/s/50a2addbfe6507df07a53fbd6fb805a9b84287665e8fedcd5236248fd602d16d" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:24.720942 systemd[1]: Started docker-34e7000cffb97d21e8e59c6b42dfe81a8fe45f865f37617b63d16aa17166ff46.scope - libcontainer container 34e7000cffb97d21e8e59c6b42dfe81a8fe45f865f37617b63d16aa17166ff46. Jun 12 23:03:24.728000 audit: BPF prog-id=264 op=LOAD Jun 12 23:03:24.728000 audit: BPF prog-id=265 op=LOAD Jun 12 23:03:24.728000 audit[7068]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1efd9df37f80 a2=98 a3=0 items=0 ppid=7057 pid=7068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346537303030636666623937643231653865353963366234 Jun 12 23:03:24.729000 audit: BPF prog-id=265 op=UNLOAD Jun 12 23:03:24.729000 audit[7068]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7057 pid=7068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346537303030636666623937643231653865353963366234 Jun 12 23:03:24.729000 audit: BPF prog-id=266 op=LOAD Jun 12 23:03:24.729000 audit[7068]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1efd9df38258 a2=98 a3=0 items=0 ppid=7057 pid=7068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346537303030636666623937643231653865353963366234 Jun 12 23:03:24.729000 audit: BPF prog-id=267 op=LOAD Jun 12 23:03:24.729000 audit[7068]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1efd9df37f98 a2=98 a3=0 items=0 ppid=7057 pid=7068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346537303030636666623937643231653865353963366234 Jun 12 23:03:24.729000 audit: BPF prog-id=267 op=UNLOAD Jun 12 23:03:24.729000 audit[7068]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7057 pid=7068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346537303030636666623937643231653865353963366234 Jun 12 23:03:24.729000 audit: BPF prog-id=266 op=UNLOAD Jun 12 23:03:24.729000 audit[7068]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7057 pid=7068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346537303030636666623937643231653865353963366234 Jun 12 23:03:24.729000 audit: BPF prog-id=268 op=LOAD Jun 12 23:03:24.729000 audit[7068]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1efd9df384a8 a2=98 a3=0 items=0 ppid=7057 pid=7068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.729000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346537303030636666623937643231653865353963366234 Jun 12 23:03:24.745803 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:24.750800 kernel: docker0: port 1(vethacd759b) entered blocking state Jun 12 23:03:24.750884 kernel: docker0: port 1(vethacd759b) entered disabled state Jun 12 23:03:24.753521 kernel: vethacd759b: entered allmulticast mode Jun 12 23:03:24.756353 kernel: vethacd759b: entered promiscuous mode Jun 12 23:03:24.742000 audit: ANOM_PROMISCUOUS dev=vethacd759b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:24.742000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f8ff0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.742000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:24.758000 audit[7090]: NETFILTER_CFG table=raw:125 family=2 entries=1 op=nft_register_rule pid=7090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:24.758000 audit[7090]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffb3bf3c0 a2=0 a3=0 items=0 ppid=2935 pid=7090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:24.758000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:24.760135 systemd-networkd[2176]: vethacd759b: Link UP Jun 12 23:03:24.774797 kernel: eth0: renamed from veth1a6ee2c Jun 12 23:03:24.782006 kernel: docker0: port 1(vethacd759b) entered blocking state Jun 12 23:03:24.782068 kernel: docker0: port 1(vethacd759b) entered forwarding state Jun 12 23:03:24.782330 systemd-networkd[2176]: vethacd759b: Gained carrier Jun 12 23:03:24.782683 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:24.861950 sshd[7015]: Connection closed by invalid user db2fenc1 43.160.253.60 port 40980 [preauth] Jun 12 23:03:24.861000 audit[7015]: AUDIT1109 pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:24.864101 systemd[1]: sshd@45-35-10.0.0.35:22-43.160.253.60:40980.service: Deactivated successfully. Jun 12 23:03:24.863000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-35-10.0.0.35:22-43.160.253.60:40980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:25.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-36-10.0.0.35:22-43.160.253.60:40994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:25.034040 systemd[1]: Started sshd@46-36-10.0.0.35:22-43.160.253.60:40994.service - OpenSSH per-connection server daemon (43.160.253.60:40994). Jun 12 23:03:25.547536 sshd[7101]: Invalid user devopsadmin from 43.160.253.60 port 40994 Jun 12 23:03:25.709345 sshd[7101]: Connection closed by invalid user devopsadmin 43.160.253.60 port 40994 [preauth] Jun 12 23:03:25.708000 audit[7101]: AUDIT1109 pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:25.711333 systemd[1]: sshd@46-36-10.0.0.35:22-43.160.253.60:40994.service: Deactivated successfully. Jun 12 23:03:25.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-36-10.0.0.35:22-43.160.253.60:40994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:25.807815 systemd[1]: docker-34e7000cffb97d21e8e59c6b42dfe81a8fe45f865f37617b63d16aa17166ff46.scope: Deactivated successfully. Jun 12 23:03:25.818655 dockerd[2935]: time="2026-06-12T23:03:25.818614614Z" level=info msg="ignoring event" container=34e7000cffb97d21e8e59c6b42dfe81a8fe45f865f37617b63d16aa17166ff46 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:25.819420 containerd[2455]: time="2026-06-12T23:03:25.819373129Z" level=info msg="shim disconnected" id=34e7000cffb97d21e8e59c6b42dfe81a8fe45f865f37617b63d16aa17166ff46 namespace=moby Jun 12 23:03:25.819420 containerd[2455]: time="2026-06-12T23:03:25.819404320Z" level=info msg="cleaning up after shim disconnected" id=34e7000cffb97d21e8e59c6b42dfe81a8fe45f865f37617b63d16aa17166ff46 namespace=moby Jun 12 23:03:25.819910 containerd[2455]: time="2026-06-12T23:03:25.819411143Z" level=info msg="cleaning up dead shim" id=34e7000cffb97d21e8e59c6b42dfe81a8fe45f865f37617b63d16aa17166ff46 namespace=moby Jun 12 23:03:25.840191 systemd-networkd[2176]: vethacd759b: Lost carrier Jun 12 23:03:25.842832 kernel: docker0: port 1(vethacd759b) entered disabled state Jun 12 23:03:25.842878 kernel: veth1a6ee2c: renamed from eth0 Jun 12 23:03:25.856000 audit[7128]: NETFILTER_CFG table=raw:126 family=2 entries=1 op=nft_unregister_rule pid=7128 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:25.856000 audit[7128]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc0195210 a2=0 a3=0 items=0 ppid=2935 pid=7128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:25.856000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:25.867181 systemd-networkd[2176]: vethacd759b: Link DOWN Jun 12 23:03:25.871012 kernel: docker0: port 1(vethacd759b) entered disabled state Jun 12 23:03:25.877926 kernel: vethacd759b (unregistering): left allmulticast mode Jun 12 23:03:25.877991 kernel: vethacd759b (unregistering): left promiscuous mode Jun 12 23:03:25.866000 audit: ANOM_PROMISCUOUS dev=vethacd759b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:25.881460 kernel: docker0: port 1(vethacd759b) entered disabled state Jun 12 23:03:25.866000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b23de60 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:25.866000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:25.889201 systemd[1]: Started sshd@47-4108-10.0.0.35:22-43.160.253.60:57414.service - OpenSSH per-connection server daemon (43.160.253.60:57414). Jun 12 23:03:25.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-4108-10.0.0.35:22-43.160.253.60:57414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:25.891496 systemd[1]: run-docker-netns-369a8cd7bef0.mount: Deactivated successfully. Jun 12 23:03:25.895247 systemd[1]: var-lib-docker-overlay2-82d89f5a1fb820e914056b8ca8ea4cfe200d613c294611e8c431237bdd544e7e-merged.mount: Deactivated successfully. Jun 12 23:03:25.900000 audit: BPF prog-id=264 op=UNLOAD Jun 12 23:03:25.900000 audit: BPF prog-id=268 op=UNLOAD Jun 12 23:03:25.993917 systemd[1]: var-lib-docker-overlay2-1f9f8caf403cd409f4fa6796a697a03e72a3e5d314612ce52c85246c40d0d6bf\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:26.063674 containerd[2455]: time="2026-06-12T23:03:26.063181813Z" level=info msg="connecting to shim 4694506c9a6da46f40c2b301d8d248c59b17c23d08df4eb4025f5e34fb7678c0" address="unix:///run/containerd/s/6ce1899da8e1ab918b61ccd9660c5d6d61e7f9b317d143a4e3c17eca4fe2ab72" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:26.080923 systemd[1]: Started docker-4694506c9a6da46f40c2b301d8d248c59b17c23d08df4eb4025f5e34fb7678c0.scope - libcontainer container 4694506c9a6da46f40c2b301d8d248c59b17c23d08df4eb4025f5e34fb7678c0. Jun 12 23:03:26.088000 audit: BPF prog-id=269 op=LOAD Jun 12 23:03:26.088000 audit: BPF prog-id=270 op=LOAD Jun 12 23:03:26.088000 audit[7160]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=623015837f80 a2=98 a3=0 items=0 ppid=7148 pid=7160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:26.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363934353036633961366461343666343063326233303164 Jun 12 23:03:26.088000 audit: BPF prog-id=270 op=UNLOAD Jun 12 23:03:26.088000 audit[7160]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7148 pid=7160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:26.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363934353036633961366461343666343063326233303164 Jun 12 23:03:26.089000 audit: BPF prog-id=271 op=LOAD Jun 12 23:03:26.089000 audit[7160]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=623015838258 a2=98 a3=0 items=0 ppid=7148 pid=7160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:26.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363934353036633961366461343666343063326233303164 Jun 12 23:03:26.089000 audit: BPF prog-id=272 op=LOAD Jun 12 23:03:26.089000 audit[7160]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=623015837f98 a2=98 a3=0 items=0 ppid=7148 pid=7160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:26.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363934353036633961366461343666343063326233303164 Jun 12 23:03:26.089000 audit: BPF prog-id=272 op=UNLOAD Jun 12 23:03:26.089000 audit[7160]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7148 pid=7160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:26.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363934353036633961366461343666343063326233303164 Jun 12 23:03:26.089000 audit: BPF prog-id=271 op=UNLOAD Jun 12 23:03:26.089000 audit[7160]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7148 pid=7160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:26.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363934353036633961366461343666343063326233303164 Jun 12 23:03:26.089000 audit: BPF prog-id=273 op=LOAD Jun 12 23:03:26.089000 audit[7160]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6230158384a8 a2=98 a3=0 items=0 ppid=7148 pid=7160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:26.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34363934353036633961366461343666343063326233303164 Jun 12 23:03:26.102199 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:26.109876 kernel: docker0: port 1(veth2e6159b) entered blocking state Jun 12 23:03:26.109946 kernel: docker0: port 1(veth2e6159b) entered disabled state Jun 12 23:03:26.113669 kernel: veth2e6159b: entered allmulticast mode Jun 12 23:03:26.117327 kernel: veth2e6159b: entered promiscuous mode Jun 12 23:03:26.100000 audit: ANOM_PROMISCUOUS dev=veth2e6159b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:26.100000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760bc31920 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:26.100000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:26.119000 audit[7182]: NETFILTER_CFG table=raw:127 family=2 entries=1 op=nft_register_rule pid=7182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:26.119000 audit[7182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffa7cbee0 a2=0 a3=0 items=0 ppid=2935 pid=7182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:26.119000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:26.120449 systemd-networkd[2176]: veth2e6159b: Link UP Jun 12 23:03:26.138794 kernel: eth0: renamed from vethb93d452 Jun 12 23:03:26.138861 kernel: docker0: port 1(veth2e6159b) entered blocking state Jun 12 23:03:26.138878 kernel: docker0: port 1(veth2e6159b) entered forwarding state Jun 12 23:03:26.141853 systemd-networkd[2176]: veth2e6159b: Gained carrier Jun 12 23:03:26.142039 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:26.403113 sshd[7130]: Invalid user devops from 43.160.253.60 port 57414 Jun 12 23:03:26.564833 sshd[7130]: Connection closed by invalid user devops 43.160.253.60 port 57414 [preauth] Jun 12 23:03:26.564000 audit[7130]: AUDIT1109 pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:26.566538 systemd[1]: sshd@47-4108-10.0.0.35:22-43.160.253.60:57414.service: Deactivated successfully. Jun 12 23:03:26.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-4108-10.0.0.35:22-43.160.253.60:57414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:26.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-4109-10.0.0.35:22-43.160.253.60:57424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:26.737372 systemd[1]: Started sshd@48-4109-10.0.0.35:22-43.160.253.60:57424.service - OpenSSH per-connection server daemon (43.160.253.60:57424). Jun 12 23:03:27.167363 systemd[1]: docker-4694506c9a6da46f40c2b301d8d248c59b17c23d08df4eb4025f5e34fb7678c0.scope: Deactivated successfully. Jun 12 23:03:27.178878 dockerd[2935]: time="2026-06-12T23:03:27.178844864Z" level=info msg="ignoring event" container=4694506c9a6da46f40c2b301d8d248c59b17c23d08df4eb4025f5e34fb7678c0 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:27.179519 containerd[2455]: time="2026-06-12T23:03:27.179464170Z" level=info msg="shim disconnected" id=4694506c9a6da46f40c2b301d8d248c59b17c23d08df4eb4025f5e34fb7678c0 namespace=moby Jun 12 23:03:27.179519 containerd[2455]: time="2026-06-12T23:03:27.179495032Z" level=info msg="cleaning up after shim disconnected" id=4694506c9a6da46f40c2b301d8d248c59b17c23d08df4eb4025f5e34fb7678c0 namespace=moby Jun 12 23:03:27.179519 containerd[2455]: time="2026-06-12T23:03:27.179511023Z" level=info msg="cleaning up dead shim" id=4694506c9a6da46f40c2b301d8d248c59b17c23d08df4eb4025f5e34fb7678c0 namespace=moby Jun 12 23:03:27.200025 kernel: docker0: port 1(veth2e6159b) entered disabled state Jun 12 23:03:27.199830 systemd-networkd[2176]: veth2e6159b: Lost carrier Jun 12 23:03:27.203794 kernel: vethb93d452: renamed from eth0 Jun 12 23:03:27.216000 audit[7219]: NETFILTER_CFG table=raw:128 family=2 entries=1 op=nft_unregister_rule pid=7219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:27.216000 audit[7219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdca3db80 a2=0 a3=0 items=0 ppid=2935 pid=7219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.216000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:27.223229 systemd-networkd[2176]: veth2e6159b: Link DOWN Jun 12 23:03:27.226798 kernel: docker0: port 1(veth2e6159b) entered disabled state Jun 12 23:03:27.234263 kernel: veth2e6159b (unregistering): left allmulticast mode Jun 12 23:03:27.234324 kernel: veth2e6159b (unregistering): left promiscuous mode Jun 12 23:03:27.222000 audit: ANOM_PROMISCUOUS dev=veth2e6159b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:27.238361 kernel: docker0: port 1(veth2e6159b) entered disabled state Jun 12 23:03:27.222000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8da4c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.222000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:27.250323 systemd[1]: run-docker-netns-e1fb47a38776.mount: Deactivated successfully. Jun 12 23:03:27.251346 sshd[7194]: Invalid user guest from 43.160.253.60 port 57424 Jun 12 23:03:27.258998 systemd[1]: var-lib-docker-overlay2-1f9f8caf403cd409f4fa6796a697a03e72a3e5d314612ce52c85246c40d0d6bf-merged.mount: Deactivated successfully. Jun 12 23:03:27.259000 audit: BPF prog-id=269 op=UNLOAD Jun 12 23:03:27.259000 audit: BPF prog-id=273 op=UNLOAD Jun 12 23:03:27.342893 systemd[1]: var-lib-docker-overlay2-dd8cddfe92a4a4cc0196c8b51a8c5124433ab353d5f4ad02360b05de357851cb\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:27.407742 containerd[2455]: time="2026-06-12T23:03:27.407694454Z" level=info msg="connecting to shim bb2f0502288b5ad9344d82da99ca64edaf5c75260690fcb54b9279040415572c" address="unix:///run/containerd/s/dec8bbf4837b4b85ded855f61c03489ad9540351dd5f31101eb966586c6692da" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:27.413854 sshd[7194]: Connection closed by invalid user guest 43.160.253.60 port 57424 [preauth] Jun 12 23:03:27.413000 audit[7194]: AUDIT1109 pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:27.415568 systemd[1]: sshd@48-4109-10.0.0.35:22-43.160.253.60:57424.service: Deactivated successfully. Jun 12 23:03:27.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-4109-10.0.0.35:22-43.160.253.60:57424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:27.431958 systemd[1]: Started docker-bb2f0502288b5ad9344d82da99ca64edaf5c75260690fcb54b9279040415572c.scope - libcontainer container bb2f0502288b5ad9344d82da99ca64edaf5c75260690fcb54b9279040415572c. Jun 12 23:03:27.439000 audit: BPF prog-id=274 op=LOAD Jun 12 23:03:27.440000 audit: BPF prog-id=275 op=LOAD Jun 12 23:03:27.440000 audit[7247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1f42a437f80 a2=98 a3=0 items=0 ppid=7236 pid=7247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623266303530323238386235616439333434643832646139 Jun 12 23:03:27.440000 audit: BPF prog-id=275 op=UNLOAD Jun 12 23:03:27.440000 audit[7247]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7236 pid=7247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623266303530323238386235616439333434643832646139 Jun 12 23:03:27.440000 audit: BPF prog-id=276 op=LOAD Jun 12 23:03:27.440000 audit[7247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1f42a438258 a2=98 a3=0 items=0 ppid=7236 pid=7247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623266303530323238386235616439333434643832646139 Jun 12 23:03:27.440000 audit: BPF prog-id=277 op=LOAD Jun 12 23:03:27.440000 audit[7247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=1f42a437f98 a2=98 a3=0 items=0 ppid=7236 pid=7247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623266303530323238386235616439333434643832646139 Jun 12 23:03:27.440000 audit: BPF prog-id=277 op=UNLOAD Jun 12 23:03:27.440000 audit[7247]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=7236 pid=7247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623266303530323238386235616439333434643832646139 Jun 12 23:03:27.440000 audit: BPF prog-id=276 op=UNLOAD Jun 12 23:03:27.440000 audit[7247]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7236 pid=7247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623266303530323238386235616439333434643832646139 Jun 12 23:03:27.440000 audit: BPF prog-id=278 op=LOAD Jun 12 23:03:27.440000 audit[7247]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1f42a4384a8 a2=98 a3=0 items=0 ppid=7236 pid=7247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62623266303530323238386235616439333434643832646139 Jun 12 23:03:27.459862 kernel: docker0: port 1(vethb5665fa) entered blocking state Jun 12 23:03:27.459938 kernel: docker0: port 1(vethb5665fa) entered disabled state Jun 12 23:03:27.463360 kernel: vethb5665fa: entered allmulticast mode Jun 12 23:03:27.466558 kernel: vethb5665fa: entered promiscuous mode Jun 12 23:03:27.451000 audit: ANOM_PROMISCUOUS dev=vethb5665fa prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:27.451000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760bc317d0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.451000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:27.467237 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:27.468000 audit[7271]: NETFILTER_CFG table=raw:129 family=2 entries=1 op=nft_register_rule pid=7271 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:27.468000 audit[7271]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcbc47ad0 a2=0 a3=0 items=0 ppid=2935 pid=7271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:27.468000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:27.470186 systemd-networkd[2176]: vethb5665fa: Link UP Jun 12 23:03:27.493881 kernel: eth0: renamed from vethe1f1730 Jun 12 23:03:27.493818 systemd-networkd[2176]: vethb5665fa: Gained carrier Jun 12 23:03:27.494023 kernel: docker0: port 1(vethb5665fa) entered blocking state Jun 12 23:03:27.494040 kernel: docker0: port 1(vethb5665fa) entered forwarding state Jun 12 23:03:27.494586 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:27.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4110-10.0.0.35:22-43.160.253.60:57440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:27.584128 systemd[1]: Started sshd@49-4110-10.0.0.35:22-43.160.253.60:57440.service - OpenSSH per-connection server daemon (43.160.253.60:57440). Jun 12 23:03:28.256334 sshd[7280]: Connection closed by authenticating user root 43.160.253.60 port 57440 [preauth] Jun 12 23:03:28.256000 audit[7280]: AUDIT1109 pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:28.258397 systemd[1]: sshd@49-4110-10.0.0.35:22-43.160.253.60:57440.service: Deactivated successfully. Jun 12 23:03:28.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-4110-10.0.0.35:22-43.160.253.60:57440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:28.430635 systemd[1]: Started sshd@50-4111-10.0.0.35:22-43.160.253.60:57446.service - OpenSSH per-connection server daemon (43.160.253.60:57446). Jun 12 23:03:28.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-4111-10.0.0.35:22-43.160.253.60:57446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:28.518182 systemd[1]: docker-bb2f0502288b5ad9344d82da99ca64edaf5c75260690fcb54b9279040415572c.scope: Deactivated successfully. Jun 12 23:03:28.530397 dockerd[2935]: time="2026-06-12T23:03:28.530127117Z" level=info msg="ignoring event" container=bb2f0502288b5ad9344d82da99ca64edaf5c75260690fcb54b9279040415572c module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:28.531065 containerd[2455]: time="2026-06-12T23:03:28.530328971Z" level=info msg="shim disconnected" id=bb2f0502288b5ad9344d82da99ca64edaf5c75260690fcb54b9279040415572c namespace=moby Jun 12 23:03:28.531065 containerd[2455]: time="2026-06-12T23:03:28.530842458Z" level=info msg="cleaning up after shim disconnected" id=bb2f0502288b5ad9344d82da99ca64edaf5c75260690fcb54b9279040415572c namespace=moby Jun 12 23:03:28.531065 containerd[2455]: time="2026-06-12T23:03:28.530852010Z" level=info msg="cleaning up dead shim" id=bb2f0502288b5ad9344d82da99ca64edaf5c75260690fcb54b9279040415572c namespace=moby Jun 12 23:03:28.551964 systemd-networkd[2176]: vethb5665fa: Lost carrier Jun 12 23:03:28.552800 kernel: docker0: port 1(vethb5665fa) entered disabled state Jun 12 23:03:28.552855 kernel: vethe1f1730: renamed from eth0 Jun 12 23:03:28.569000 audit[7310]: NETFILTER_CFG table=raw:130 family=2 entries=1 op=nft_unregister_rule pid=7310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:28.569000 audit[7310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd2ed2280 a2=0 a3=0 items=0 ppid=2935 pid=7310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.569000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:28.575129 systemd-networkd[2176]: vethb5665fa: Link DOWN Jun 12 23:03:28.582890 kernel: docker0: port 1(vethb5665fa) entered disabled state Jun 12 23:03:28.582949 kernel: vethb5665fa (unregistering): left allmulticast mode Jun 12 23:03:28.587071 kernel: vethb5665fa (unregistering): left promiscuous mode Jun 12 23:03:28.574000 audit: ANOM_PROMISCUOUS dev=vethb5665fa prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:28.590837 kernel: docker0: port 1(vethb5665fa) entered disabled state Jun 12 23:03:28.574000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c2c6ce0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.574000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:28.604219 systemd[1]: run-docker-netns-574fb120cf7f.mount: Deactivated successfully. Jun 12 23:03:28.607912 systemd[1]: var-lib-docker-overlay2-dd8cddfe92a4a4cc0196c8b51a8c5124433ab353d5f4ad02360b05de357851cb-merged.mount: Deactivated successfully. Jun 12 23:03:28.617000 audit: BPF prog-id=274 op=UNLOAD Jun 12 23:03:28.617000 audit: BPF prog-id=278 op=UNLOAD Jun 12 23:03:28.692050 systemd[1]: var-lib-docker-overlay2-dade7a6b8fafeec102183c025b0b09d529f0030645a682dbd30bfff007105420\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:28.755509 containerd[2455]: time="2026-06-12T23:03:28.755453190Z" level=info msg="connecting to shim c05683cd3d688fda1e6270b930a6497e82c707b23955f4d247c7e7db4f1d21f4" address="unix:///run/containerd/s/96d9f655a9d890fd447b6fa09eeadb5d1c6db9257aa0a4d5d472bbc32da4e937" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:28.772926 systemd[1]: Started docker-c05683cd3d688fda1e6270b930a6497e82c707b23955f4d247c7e7db4f1d21f4.scope - libcontainer container c05683cd3d688fda1e6270b930a6497e82c707b23955f4d247c7e7db4f1d21f4. Jun 12 23:03:28.780000 audit: BPF prog-id=279 op=LOAD Jun 12 23:03:28.781000 audit: BPF prog-id=280 op=LOAD Jun 12 23:03:28.781000 audit[7338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2b5476f55f80 a2=98 a3=0 items=0 ppid=7326 pid=7338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303536383363643364363838666461316536323730623933 Jun 12 23:03:28.781000 audit: BPF prog-id=280 op=UNLOAD Jun 12 23:03:28.781000 audit[7338]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7326 pid=7338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303536383363643364363838666461316536323730623933 Jun 12 23:03:28.781000 audit: BPF prog-id=281 op=LOAD Jun 12 23:03:28.781000 audit[7338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2b5476f56258 a2=98 a3=0 items=0 ppid=7326 pid=7338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303536383363643364363838666461316536323730623933 Jun 12 23:03:28.781000 audit: BPF prog-id=282 op=LOAD Jun 12 23:03:28.781000 audit[7338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2b5476f55f98 a2=98 a3=0 items=0 ppid=7326 pid=7338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303536383363643364363838666461316536323730623933 Jun 12 23:03:28.782000 audit: BPF prog-id=282 op=UNLOAD Jun 12 23:03:28.782000 audit[7338]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7326 pid=7338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303536383363643364363838666461316536323730623933 Jun 12 23:03:28.782000 audit: BPF prog-id=281 op=UNLOAD Jun 12 23:03:28.782000 audit[7338]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7326 pid=7338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303536383363643364363838666461316536323730623933 Jun 12 23:03:28.782000 audit: BPF prog-id=283 op=LOAD Jun 12 23:03:28.782000 audit[7338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2b5476f564a8 a2=98 a3=0 items=0 ppid=7326 pid=7338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63303536383363643364363838666461316536323730623933 Jun 12 23:03:28.801733 kernel: docker0: port 1(veth5b93465) entered blocking state Jun 12 23:03:28.801826 kernel: docker0: port 1(veth5b93465) entered disabled state Jun 12 23:03:28.804759 kernel: veth5b93465: entered allmulticast mode Jun 12 23:03:28.807530 kernel: veth5b93465: entered promiscuous mode Jun 12 23:03:28.793000 audit: ANOM_PROMISCUOUS dev=veth5b93465 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:28.793000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0c750 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.793000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:28.809303 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:28.810000 audit[7359]: NETFILTER_CFG table=raw:131 family=2 entries=1 op=nft_register_rule pid=7359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:28.810000 audit[7359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe4be0ef0 a2=0 a3=0 items=0 ppid=2935 pid=7359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:28.810000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:28.811928 systemd-networkd[2176]: veth5b93465: Link UP Jun 12 23:03:28.833789 kernel: eth0: renamed from veth29c902b Jun 12 23:03:28.841666 kernel: docker0: port 1(veth5b93465) entered blocking state Jun 12 23:03:28.841591 systemd-networkd[2176]: veth5b93465: Gained carrier Jun 12 23:03:28.842028 kernel: docker0: port 1(veth5b93465) entered forwarding state Jun 12 23:03:28.842280 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:28.942131 sshd[7286]: Invalid user deploy from 43.160.253.60 port 57446 Jun 12 23:03:29.103894 sshd[7286]: Connection closed by invalid user deploy 43.160.253.60 port 57446 [preauth] Jun 12 23:03:29.103000 audit[7286]: AUDIT1109 pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:29.107380 kernel: kauditd_printk_skb: 152 callbacks suppressed Jun 12 23:03:29.107452 kernel: audit: type=1109 audit(1781305409.103:1123): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:29.107754 systemd[1]: sshd@50-4111-10.0.0.35:22-43.160.253.60:57446.service: Deactivated successfully. Jun 12 23:03:29.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-4111-10.0.0.35:22-43.160.253.60:57446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:29.139296 kernel: audit: type=1131 audit(1781305409.107:1124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-4111-10.0.0.35:22-43.160.253.60:57446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:29.296318 systemd[1]: Started sshd@51-37-10.0.0.35:22-43.160.253.60:57454.service - OpenSSH per-connection server daemon (43.160.253.60:57454). Jun 12 23:03:29.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-37-10.0.0.35:22-43.160.253.60:57454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:29.311807 kernel: audit: type=1130 audit(1781305409.295:1125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-37-10.0.0.35:22-43.160.253.60:57454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:29.825849 sshd[7371]: Invalid user fa from 43.160.253.60 port 57454 Jun 12 23:03:29.868367 systemd[1]: docker-c05683cd3d688fda1e6270b930a6497e82c707b23955f4d247c7e7db4f1d21f4.scope: Deactivated successfully. Jun 12 23:03:29.879764 containerd[2455]: time="2026-06-12T23:03:29.879735864Z" level=info msg="shim disconnected" id=c05683cd3d688fda1e6270b930a6497e82c707b23955f4d247c7e7db4f1d21f4 namespace=moby Jun 12 23:03:29.880232 dockerd[2935]: time="2026-06-12T23:03:29.880156748Z" level=info msg="ignoring event" container=c05683cd3d688fda1e6270b930a6497e82c707b23955f4d247c7e7db4f1d21f4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:29.880489 containerd[2455]: time="2026-06-12T23:03:29.880469198Z" level=info msg="cleaning up after shim disconnected" id=c05683cd3d688fda1e6270b930a6497e82c707b23955f4d247c7e7db4f1d21f4 namespace=moby Jun 12 23:03:29.880537 containerd[2455]: time="2026-06-12T23:03:29.880527683Z" level=info msg="cleaning up dead shim" id=c05683cd3d688fda1e6270b930a6497e82c707b23955f4d247c7e7db4f1d21f4 namespace=moby Jun 12 23:03:29.901271 systemd-networkd[2176]: veth5b93465: Lost carrier Jun 12 23:03:29.904035 kernel: docker0: port 1(veth5b93465) entered disabled state Jun 12 23:03:29.904081 kernel: veth29c902b: renamed from eth0 Jun 12 23:03:29.919000 audit[7396]: NETFILTER_CFG table=raw:132 family=2 entries=1 op=nft_unregister_rule pid=7396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:29.919000 audit[7396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd3750bc0 a2=0 a3=0 items=0 ppid=2935 pid=7396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:29.948294 kernel: audit: type=1325 audit(1781305409.919:1126): table=raw:132 family=2 entries=1 op=nft_unregister_rule pid=7396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:29.948336 kernel: audit: type=1300 audit(1781305409.919:1126): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd3750bc0 a2=0 a3=0 items=0 ppid=2935 pid=7396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:29.919000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:29.959993 kernel: audit: type=1327 audit(1781305409.919:1126): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:29.961423 systemd-networkd[2176]: veth5b93465: Link DOWN Jun 12 23:03:29.965840 kernel: docker0: port 1(veth5b93465) entered disabled state Jun 12 23:03:29.973792 kernel: veth5b93465 (unregistering): left allmulticast mode Jun 12 23:03:29.973857 kernel: veth5b93465 (unregistering): left promiscuous mode Jun 12 23:03:29.960000 audit: ANOM_PROMISCUOUS dev=veth5b93465 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:29.979896 kernel: docker0: port 1(veth5b93465) entered disabled state Jun 12 23:03:29.979922 kernel: audit: type=1700 audit(1781305409.960:1127): dev=veth5b93465 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:29.987497 sshd[7371]: Connection closed by invalid user fa 43.160.253.60 port 57454 [preauth] Jun 12 23:03:29.987000 audit[7371]: AUDIT1109 pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:29.991386 systemd[1]: sshd@51-37-10.0.0.35:22-43.160.253.60:57454.service: Deactivated successfully. Jun 12 23:03:29.990000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-37-10.0.0.35:22-43.160.253.60:57454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:30.018554 kernel: audit: type=1109 audit(1781305409.987:1128): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:30.018594 kernel: audit: type=1131 audit(1781305409.990:1129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-37-10.0.0.35:22-43.160.253.60:57454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:29.960000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bd8b400 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:29.960000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:30.038788 kernel: audit: type=1300 audit(1781305409.960:1127): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bd8b400 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:30.041338 systemd[1]: run-docker-netns-aaba69d03bcc.mount: Deactivated successfully. Jun 12 23:03:30.044429 systemd[1]: var-lib-docker-overlay2-dade7a6b8fafeec102183c025b0b09d529f0030645a682dbd30bfff007105420-merged.mount: Deactivated successfully. Jun 12 23:03:30.051000 audit: BPF prog-id=279 op=UNLOAD Jun 12 23:03:30.051000 audit: BPF prog-id=283 op=UNLOAD Jun 12 23:03:30.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-38-10.0.0.35:22-43.160.253.60:57466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:30.157538 systemd[1]: Started sshd@52-38-10.0.0.35:22-43.160.253.60:57466.service - OpenSSH per-connection server daemon (43.160.253.60:57466). Jun 12 23:03:30.241393 containerd[2455]: time="2026-06-12T23:03:30.241356897Z" level=info msg="connecting to shim bd8a6dcfb8c27e833cae2307a163693f269f4c2c9ea9b8584970230db555cfdb" address="unix:///run/containerd/s/6b55a396a661053707b9b5d9b8278160e6e1e88977802c537ae0c58f7c32893f" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:30.258946 systemd[1]: Started docker-bd8a6dcfb8c27e833cae2307a163693f269f4c2c9ea9b8584970230db555cfdb.scope - libcontainer container bd8a6dcfb8c27e833cae2307a163693f269f4c2c9ea9b8584970230db555cfdb. Jun 12 23:03:30.266000 audit: BPF prog-id=284 op=LOAD Jun 12 23:03:30.266000 audit: BPF prog-id=285 op=LOAD Jun 12 23:03:30.266000 audit[7431]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=330ed403ff80 a2=98 a3=0 items=0 ppid=7419 pid=7431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:30.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643861366463666238633237653833336361653233303761 Jun 12 23:03:30.266000 audit: BPF prog-id=285 op=UNLOAD Jun 12 23:03:30.266000 audit[7431]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7419 pid=7431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:30.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643861366463666238633237653833336361653233303761 Jun 12 23:03:30.266000 audit: BPF prog-id=286 op=LOAD Jun 12 23:03:30.266000 audit[7431]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=330ed4040258 a2=98 a3=0 items=0 ppid=7419 pid=7431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:30.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643861366463666238633237653833336361653233303761 Jun 12 23:03:30.266000 audit: BPF prog-id=287 op=LOAD Jun 12 23:03:30.266000 audit[7431]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=330ed403ff98 a2=98 a3=0 items=0 ppid=7419 pid=7431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:30.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643861366463666238633237653833336361653233303761 Jun 12 23:03:30.266000 audit: BPF prog-id=287 op=UNLOAD Jun 12 23:03:30.266000 audit[7431]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7419 pid=7431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:30.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643861366463666238633237653833336361653233303761 Jun 12 23:03:30.266000 audit: BPF prog-id=286 op=UNLOAD Jun 12 23:03:30.266000 audit[7431]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7419 pid=7431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:30.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643861366463666238633237653833336361653233303761 Jun 12 23:03:30.266000 audit: BPF prog-id=288 op=LOAD Jun 12 23:03:30.266000 audit[7431]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=330ed40404a8 a2=98 a3=0 items=0 ppid=7419 pid=7431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:30.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62643861366463666238633237653833336361653233303761 Jun 12 23:03:30.283816 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:30.287443 kernel: docker0: port 1(veth1e92fdf) entered blocking state Jun 12 23:03:30.287513 kernel: docker0: port 1(veth1e92fdf) entered disabled state Jun 12 23:03:30.290670 kernel: veth1e92fdf: entered allmulticast mode Jun 12 23:03:30.293757 kernel: veth1e92fdf: entered promiscuous mode Jun 12 23:03:30.278000 audit: ANOM_PROMISCUOUS dev=veth1e92fdf prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:30.278000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0df50 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:30.278000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:30.295000 audit[7452]: NETFILTER_CFG table=raw:133 family=2 entries=1 op=nft_register_rule pid=7452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:30.295000 audit[7452]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc03808f0 a2=0 a3=0 items=0 ppid=2935 pid=7452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:30.295000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:30.296928 systemd-networkd[2176]: veth1e92fdf: Link UP Jun 12 23:03:30.314349 kernel: eth0: renamed from vethc0ed6ed Jun 12 23:03:30.314428 kernel: docker0: port 1(veth1e92fdf) entered blocking state Jun 12 23:03:30.318092 kernel: docker0: port 1(veth1e92fdf) entered forwarding state Jun 12 23:03:30.318449 systemd-networkd[2176]: veth1e92fdf: Gained carrier Jun 12 23:03:30.318963 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:30.671983 sshd[7407]: Invalid user db2inst1 from 43.160.253.60 port 57466 Jun 12 23:03:30.833624 sshd[7407]: Connection closed by invalid user db2inst1 43.160.253.60 port 57466 [preauth] Jun 12 23:03:30.833000 audit[7407]: AUDIT1109 pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:30.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-38-10.0.0.35:22-43.160.253.60:57466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:30.835376 systemd[1]: sshd@52-38-10.0.0.35:22-43.160.253.60:57466.service: Deactivated successfully. Jun 12 23:03:31.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-39-10.0.0.35:22-43.160.253.60:57468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:31.004343 systemd[1]: Started sshd@53-39-10.0.0.35:22-43.160.253.60:57468.service - OpenSSH per-connection server daemon (43.160.253.60:57468). Jun 12 23:03:31.344578 systemd[1]: docker-bd8a6dcfb8c27e833cae2307a163693f269f4c2c9ea9b8584970230db555cfdb.scope: Deactivated successfully. Jun 12 23:03:31.355613 containerd[2455]: time="2026-06-12T23:03:31.355524150Z" level=info msg="shim disconnected" id=bd8a6dcfb8c27e833cae2307a163693f269f4c2c9ea9b8584970230db555cfdb namespace=moby Jun 12 23:03:31.355613 containerd[2455]: time="2026-06-12T23:03:31.355551716Z" level=info msg="cleaning up after shim disconnected" id=bd8a6dcfb8c27e833cae2307a163693f269f4c2c9ea9b8584970230db555cfdb namespace=moby Jun 12 23:03:31.355613 containerd[2455]: time="2026-06-12T23:03:31.355556964Z" level=info msg="cleaning up dead shim" id=bd8a6dcfb8c27e833cae2307a163693f269f4c2c9ea9b8584970230db555cfdb namespace=moby Jun 12 23:03:31.356282 dockerd[2935]: time="2026-06-12T23:03:31.356062972Z" level=info msg="ignoring event" container=bd8a6dcfb8c27e833cae2307a163693f269f4c2c9ea9b8584970230db555cfdb module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:31.375656 systemd-networkd[2176]: veth1e92fdf: Lost carrier Jun 12 23:03:31.376274 kernel: docker0: port 1(veth1e92fdf) entered disabled state Jun 12 23:03:31.379799 kernel: vethc0ed6ed: renamed from eth0 Jun 12 23:03:31.391000 audit[7487]: NETFILTER_CFG table=raw:134 family=2 entries=1 op=nft_unregister_rule pid=7487 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:31.391000 audit[7487]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd02a7260 a2=0 a3=0 items=0 ppid=2935 pid=7487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.391000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:31.395253 systemd-networkd[2176]: veth1e92fdf: Link DOWN Jun 12 23:03:31.399797 kernel: docker0: port 1(veth1e92fdf) entered disabled state Jun 12 23:03:31.407555 kernel: veth1e92fdf (unregistering): left allmulticast mode Jun 12 23:03:31.407607 kernel: veth1e92fdf (unregistering): left promiscuous mode Jun 12 23:03:31.394000 audit: ANOM_PROMISCUOUS dev=veth1e92fdf prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:31.411180 kernel: docker0: port 1(veth1e92fdf) entered disabled state Jun 12 23:03:31.394000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f63c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.394000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:31.423418 systemd[1]: run-docker-netns-ba514423e060.mount: Deactivated successfully. Jun 12 23:03:31.425835 systemd[1]: var-lib-docker-overlay2-eb67dd77cc433da9cd0a2132e9db79d784608d82a6dbe0a0e7bf6305fc80d50c-merged.mount: Deactivated successfully. Jun 12 23:03:31.436000 audit: BPF prog-id=284 op=UNLOAD Jun 12 23:03:31.436000 audit: BPF prog-id=288 op=UNLOAD Jun 12 23:03:31.493126 systemd[1]: var-lib-docker-overlay2-927d56aca7516c7399dacd9f75213b9324897325b99ede33fc860ce86987e313\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:31.513227 sshd[7463]: Invalid user dev from 43.160.253.60 port 57468 Jun 12 23:03:31.572179 containerd[2455]: time="2026-06-12T23:03:31.572140349Z" level=info msg="connecting to shim b944edc3352d9ac4e1029569374798792f3deaa135a3debde57d8eff41a0f0dc" address="unix:///run/containerd/s/f8865df8ebc428d90b889e982a8fa4a3cf1a89cec96d2c0e486a4250c795f56c" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:31.591923 systemd[1]: Started docker-b944edc3352d9ac4e1029569374798792f3deaa135a3debde57d8eff41a0f0dc.scope - libcontainer container b944edc3352d9ac4e1029569374798792f3deaa135a3debde57d8eff41a0f0dc. Jun 12 23:03:31.599000 audit: BPF prog-id=289 op=LOAD Jun 12 23:03:31.600000 audit: BPF prog-id=290 op=LOAD Jun 12 23:03:31.600000 audit[7519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=505cace37f80 a2=98 a3=0 items=0 ppid=7506 pid=7519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62393434656463333335326439616334653130323935363933 Jun 12 23:03:31.600000 audit: BPF prog-id=290 op=UNLOAD Jun 12 23:03:31.600000 audit[7519]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7506 pid=7519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62393434656463333335326439616334653130323935363933 Jun 12 23:03:31.601000 audit: BPF prog-id=291 op=LOAD Jun 12 23:03:31.601000 audit[7519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=505cace38258 a2=98 a3=0 items=0 ppid=7506 pid=7519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62393434656463333335326439616334653130323935363933 Jun 12 23:03:31.601000 audit: BPF prog-id=292 op=LOAD Jun 12 23:03:31.601000 audit[7519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=505cace37f98 a2=98 a3=0 items=0 ppid=7506 pid=7519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62393434656463333335326439616334653130323935363933 Jun 12 23:03:31.601000 audit: BPF prog-id=292 op=UNLOAD Jun 12 23:03:31.601000 audit[7519]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=7506 pid=7519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62393434656463333335326439616334653130323935363933 Jun 12 23:03:31.601000 audit: BPF prog-id=291 op=UNLOAD Jun 12 23:03:31.601000 audit[7519]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7506 pid=7519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62393434656463333335326439616334653130323935363933 Jun 12 23:03:31.601000 audit: BPF prog-id=293 op=LOAD Jun 12 23:03:31.601000 audit[7519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=505cace384a8 a2=98 a3=0 items=0 ppid=7506 pid=7519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62393434656463333335326439616334653130323935363933 Jun 12 23:03:31.621940 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:31.626420 kernel: docker0: port 1(veth2a767c4) entered blocking state Jun 12 23:03:31.626492 kernel: docker0: port 1(veth2a767c4) entered disabled state Jun 12 23:03:31.629416 kernel: veth2a767c4: entered allmulticast mode Jun 12 23:03:31.632363 kernel: veth2a767c4: entered promiscuous mode Jun 12 23:03:31.617000 audit: ANOM_PROMISCUOUS dev=veth2a767c4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:31.617000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaa9f0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.617000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:31.635000 audit[7544]: NETFILTER_CFG table=raw:135 family=2 entries=1 op=nft_register_rule pid=7544 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:31.635000 audit[7544]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc2ad94e0 a2=0 a3=0 items=0 ppid=2935 pid=7544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:31.635000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:31.636535 systemd-networkd[2176]: veth2a767c4: Link UP Jun 12 23:03:31.660841 kernel: eth0: renamed from veth0bf6165 Jun 12 23:03:31.668194 kernel: docker0: port 1(veth2a767c4) entered blocking state Jun 12 23:03:31.668269 kernel: docker0: port 1(veth2a767c4) entered forwarding state Jun 12 23:03:31.668513 systemd-networkd[2176]: veth2a767c4: Gained carrier Jun 12 23:03:31.668940 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:31.674059 sshd[7463]: Connection closed by invalid user dev 43.160.253.60 port 57468 [preauth] Jun 12 23:03:31.673000 audit[7463]: AUDIT1109 pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:31.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-39-10.0.0.35:22-43.160.253.60:57468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:31.676375 systemd[1]: sshd@53-39-10.0.0.35:22-43.160.253.60:57468.service: Deactivated successfully. Jun 12 23:03:31.845399 systemd[1]: Started sshd@54-4112-10.0.0.35:22-43.160.253.60:57474.service - OpenSSH per-connection server daemon (43.160.253.60:57474). Jun 12 23:03:31.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-4112-10.0.0.35:22-43.160.253.60:57474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:32.515065 sshd[7556]: Connection closed by authenticating user root 43.160.253.60 port 57474 [preauth] Jun 12 23:03:32.513000 audit[7556]: AUDIT1109 pid=7556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:32.517055 systemd[1]: sshd@54-4112-10.0.0.35:22-43.160.253.60:57474.service: Deactivated successfully. Jun 12 23:03:32.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-4112-10.0.0.35:22-43.160.253.60:57474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:32.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-4113-10.0.0.35:22-43.160.253.60:57488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:32.690230 systemd[1]: Started sshd@55-4113-10.0.0.35:22-43.160.253.60:57488.service - OpenSSH per-connection server daemon (43.160.253.60:57488). Jun 12 23:03:32.693977 systemd[1]: docker-b944edc3352d9ac4e1029569374798792f3deaa135a3debde57d8eff41a0f0dc.scope: Deactivated successfully. Jun 12 23:03:32.710582 dockerd[2935]: time="2026-06-12T23:03:32.710548476Z" level=info msg="ignoring event" container=b944edc3352d9ac4e1029569374798792f3deaa135a3debde57d8eff41a0f0dc module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:32.712802 containerd[2455]: time="2026-06-12T23:03:32.712335679Z" level=info msg="shim disconnected" id=b944edc3352d9ac4e1029569374798792f3deaa135a3debde57d8eff41a0f0dc namespace=moby Jun 12 23:03:32.713269 containerd[2455]: time="2026-06-12T23:03:32.712788530Z" level=info msg="cleaning up after shim disconnected" id=b944edc3352d9ac4e1029569374798792f3deaa135a3debde57d8eff41a0f0dc namespace=moby Jun 12 23:03:32.713269 containerd[2455]: time="2026-06-12T23:03:32.713058829Z" level=info msg="cleaning up dead shim" id=b944edc3352d9ac4e1029569374798792f3deaa135a3debde57d8eff41a0f0dc namespace=moby Jun 12 23:03:32.735402 systemd-networkd[2176]: veth2a767c4: Lost carrier Jun 12 23:03:32.735809 kernel: docker0: port 1(veth2a767c4) entered disabled state Jun 12 23:03:32.735842 kernel: veth0bf6165: renamed from eth0 Jun 12 23:03:32.758000 audit[7586]: NETFILTER_CFG table=raw:136 family=2 entries=1 op=nft_unregister_rule pid=7586 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:32.758000 audit[7586]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe5256a00 a2=0 a3=0 items=0 ppid=2935 pid=7586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:32.758000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:32.765126 systemd-networkd[2176]: veth2a767c4: Link DOWN Jun 12 23:03:32.768801 kernel: docker0: port 1(veth2a767c4) entered disabled state Jun 12 23:03:32.775980 kernel: veth2a767c4 (unregistering): left allmulticast mode Jun 12 23:03:32.776038 kernel: veth2a767c4 (unregistering): left promiscuous mode Jun 12 23:03:32.779468 kernel: docker0: port 1(veth2a767c4) entered disabled state Jun 12 23:03:32.763000 audit: ANOM_PROMISCUOUS dev=veth2a767c4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:32.763000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe1c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:32.763000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:32.790913 systemd[1]: run-docker-netns-4a0b3a877dab.mount: Deactivated successfully. Jun 12 23:03:32.794103 systemd[1]: var-lib-docker-overlay2-927d56aca7516c7399dacd9f75213b9324897325b99ede33fc860ce86987e313-merged.mount: Deactivated successfully. Jun 12 23:03:32.803000 audit: BPF prog-id=289 op=UNLOAD Jun 12 23:03:32.803000 audit: BPF prog-id=293 op=UNLOAD Jun 12 23:03:32.889027 systemd[1]: var-lib-docker-overlay2-a3b8d4a8b4cdf5964a02d2d305a2b9a41b95e41ef5e6e6de7b27c62805c6478b\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:32.949239 containerd[2455]: time="2026-06-12T23:03:32.949193771Z" level=info msg="connecting to shim 07a8d9797c454c99690addb47667db4a00788de9adc6fab5d5d2428bb88246f5" address="unix:///run/containerd/s/74d4dfc9b06659f2bf89921eda9f35255a62ebc6dbfd172feb85ff7ee3d2deca" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:32.964921 systemd[1]: Started docker-07a8d9797c454c99690addb47667db4a00788de9adc6fab5d5d2428bb88246f5.scope - libcontainer container 07a8d9797c454c99690addb47667db4a00788de9adc6fab5d5d2428bb88246f5. Jun 12 23:03:32.971000 audit: BPF prog-id=294 op=LOAD Jun 12 23:03:32.971000 audit: BPF prog-id=295 op=LOAD Jun 12 23:03:32.971000 audit[7614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fd4bd73ff80 a2=98 a3=0 items=0 ppid=7602 pid=7614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:32.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376138643937393763343534633939363930616464623437 Jun 12 23:03:32.971000 audit: BPF prog-id=295 op=UNLOAD Jun 12 23:03:32.971000 audit[7614]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7602 pid=7614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:32.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376138643937393763343534633939363930616464623437 Jun 12 23:03:32.972000 audit: BPF prog-id=296 op=LOAD Jun 12 23:03:32.972000 audit[7614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fd4bd740258 a2=98 a3=0 items=0 ppid=7602 pid=7614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:32.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376138643937393763343534633939363930616464623437 Jun 12 23:03:32.972000 audit: BPF prog-id=297 op=LOAD Jun 12 23:03:32.972000 audit[7614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7fd4bd73ff98 a2=98 a3=0 items=0 ppid=7602 pid=7614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:32.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376138643937393763343534633939363930616464623437 Jun 12 23:03:32.972000 audit: BPF prog-id=297 op=UNLOAD Jun 12 23:03:32.972000 audit[7614]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7602 pid=7614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:32.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376138643937393763343534633939363930616464623437 Jun 12 23:03:32.972000 audit: BPF prog-id=296 op=UNLOAD Jun 12 23:03:32.972000 audit[7614]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7602 pid=7614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:32.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376138643937393763343534633939363930616464623437 Jun 12 23:03:32.972000 audit: BPF prog-id=298 op=LOAD Jun 12 23:03:32.972000 audit[7614]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7fd4bd7404a8 a2=98 a3=0 items=0 ppid=7602 pid=7614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:32.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30376138643937393763343534633939363930616464623437 Jun 12 23:03:32.993518 kernel: docker0: port 1(veth408726d) entered blocking state Jun 12 23:03:32.993593 kernel: docker0: port 1(veth408726d) entered disabled state Jun 12 23:03:32.996505 kernel: veth408726d: entered allmulticast mode Jun 12 23:03:32.999161 kernel: veth408726d: entered promiscuous mode Jun 12 23:03:32.984000 audit: ANOM_PROMISCUOUS dev=veth408726d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:32.984000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beabe30 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:32.984000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:33.000127 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:33.000000 audit[7636]: NETFILTER_CFG table=raw:137 family=2 entries=1 op=nft_register_rule pid=7636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:33.000000 audit[7636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe407f990 a2=0 a3=0 items=0 ppid=2935 pid=7636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:33.000000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:33.002385 systemd-networkd[2176]: veth408726d: Link UP Jun 12 23:03:33.018915 kernel: eth0: renamed from veth74bb8fc Jun 12 23:03:33.018974 kernel: docker0: port 1(veth408726d) entered blocking state Jun 12 23:03:33.022402 kernel: docker0: port 1(veth408726d) entered forwarding state Jun 12 23:03:33.022835 systemd-networkd[2176]: veth408726d: Gained carrier Jun 12 23:03:33.023068 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:33.203793 sshd[7562]: Invalid user cs2server from 43.160.253.60 port 57488 Jun 12 23:03:33.365741 sshd[7562]: Connection closed by invalid user cs2server 43.160.253.60 port 57488 [preauth] Jun 12 23:03:33.364000 audit[7562]: AUDIT1109 pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:33.367399 systemd[1]: sshd@55-4113-10.0.0.35:22-43.160.253.60:57488.service: Deactivated successfully. Jun 12 23:03:33.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-4113-10.0.0.35:22-43.160.253.60:57488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:33.537466 systemd[1]: Started sshd@56-4114-10.0.0.35:22-43.160.253.60:57504.service - OpenSSH per-connection server daemon (43.160.253.60:57504). Jun 12 23:03:33.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-4114-10.0.0.35:22-43.160.253.60:57504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:34.047204 systemd[1]: docker-07a8d9797c454c99690addb47667db4a00788de9adc6fab5d5d2428bb88246f5.scope: Deactivated successfully. Jun 12 23:03:34.054775 sshd[7647]: Invalid user pi from 43.160.253.60 port 57504 Jun 12 23:03:34.060896 dockerd[2935]: time="2026-06-12T23:03:34.060864701Z" level=info msg="ignoring event" container=07a8d9797c454c99690addb47667db4a00788de9adc6fab5d5d2428bb88246f5 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:34.061167 containerd[2455]: time="2026-06-12T23:03:34.061030302Z" level=info msg="shim disconnected" id=07a8d9797c454c99690addb47667db4a00788de9adc6fab5d5d2428bb88246f5 namespace=moby Jun 12 23:03:34.061167 containerd[2455]: time="2026-06-12T23:03:34.061055836Z" level=info msg="cleaning up after shim disconnected" id=07a8d9797c454c99690addb47667db4a00788de9adc6fab5d5d2428bb88246f5 namespace=moby Jun 12 23:03:34.061167 containerd[2455]: time="2026-06-12T23:03:34.061061484Z" level=info msg="cleaning up dead shim" id=07a8d9797c454c99690addb47667db4a00788de9adc6fab5d5d2428bb88246f5 namespace=moby Jun 12 23:03:34.083243 systemd-networkd[2176]: veth408726d: Lost carrier Jun 12 23:03:34.084087 kernel: docker0: port 1(veth408726d) entered disabled state Jun 12 23:03:34.084114 kernel: veth74bb8fc: renamed from eth0 Jun 12 23:03:34.100000 audit[7673]: NETFILTER_CFG table=raw:138 family=2 entries=1 op=nft_unregister_rule pid=7673 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:34.100000 audit[7673]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd5c4b500 a2=0 a3=0 items=0 ppid=2935 pid=7673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.100000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:34.113262 systemd-networkd[2176]: veth408726d: Link DOWN Jun 12 23:03:34.116793 kernel: docker0: port 1(veth408726d) entered disabled state Jun 12 23:03:34.120816 kernel: veth408726d (unregistering): left allmulticast mode Jun 12 23:03:34.111000 audit: ANOM_PROMISCUOUS dev=veth408726d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:34.128616 kernel: veth408726d (unregistering): left promiscuous mode Jun 12 23:03:34.128645 kernel: docker0: port 1(veth408726d) entered disabled state Jun 12 23:03:34.128658 kernel: kauditd_printk_skb: 119 callbacks suppressed Jun 12 23:03:34.128685 kernel: audit: type=1700 audit(1781305414.111:1184): dev=veth408726d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:34.111000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ffbe0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.147206 systemd[1]: run-docker-netns-a929119c59a2.mount: Deactivated successfully. Jun 12 23:03:34.111000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:34.166818 systemd[1]: var-lib-docker-overlay2-a3b8d4a8b4cdf5964a02d2d305a2b9a41b95e41ef5e6e6de7b27c62805c6478b-merged.mount: Deactivated successfully. Jun 12 23:03:34.176450 kernel: audit: type=1300 audit(1781305414.111:1184): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ffbe0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.176527 kernel: audit: type=1327 audit(1781305414.111:1184): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:34.190000 audit: BPF prog-id=294 op=UNLOAD Jun 12 23:03:34.190000 audit: BPF prog-id=298 op=UNLOAD Jun 12 23:03:34.199956 kernel: audit: type=1334 audit(1781305414.190:1185): prog-id=294 op=UNLOAD Jun 12 23:03:34.200023 kernel: audit: type=1334 audit(1781305414.190:1186): prog-id=298 op=UNLOAD Jun 12 23:03:34.216866 sshd[7647]: Connection closed by invalid user pi 43.160.253.60 port 57504 [preauth] Jun 12 23:03:34.215000 audit[7647]: AUDIT1109 pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:34.219811 systemd[1]: sshd@56-4114-10.0.0.35:22-43.160.253.60:57504.service: Deactivated successfully. Jun 12 23:03:34.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-4114-10.0.0.35:22-43.160.253.60:57504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:34.246237 kernel: audit: type=1109 audit(1781305414.215:1187): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:34.246300 kernel: audit: type=1131 audit(1781305414.215:1188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-4114-10.0.0.35:22-43.160.253.60:57504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:34.356288 containerd[2455]: time="2026-06-12T23:03:34.356189165Z" level=info msg="connecting to shim 03067deeaf84ea8a3c712d6205ef046f022db49af176502cd84023956575cc70" address="unix:///run/containerd/s/14ad6063f11ba2bf261345ae14ce2349bcbd5ee16b646f7577aafa71fbcb2cac" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:34.376932 systemd[1]: Started docker-03067deeaf84ea8a3c712d6205ef046f022db49af176502cd84023956575cc70.scope - libcontainer container 03067deeaf84ea8a3c712d6205ef046f022db49af176502cd84023956575cc70. Jun 12 23:03:34.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-4115-10.0.0.35:22-43.160.253.60:57516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:34.383007 systemd[1]: Started sshd@57-4115-10.0.0.35:22-43.160.253.60:57516.service - OpenSSH per-connection server daemon (43.160.253.60:57516). Jun 12 23:03:34.396000 audit: BPF prog-id=299 op=LOAD Jun 12 23:03:34.402270 kernel: audit: type=1130 audit(1781305414.381:1189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-4115-10.0.0.35:22-43.160.253.60:57516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:34.402349 kernel: audit: type=1334 audit(1781305414.396:1190): prog-id=299 op=LOAD Jun 12 23:03:34.396000 audit: BPF prog-id=300 op=LOAD Jun 12 23:03:34.406815 kernel: audit: type=1334 audit(1781305414.396:1191): prog-id=300 op=LOAD Jun 12 23:03:34.396000 audit[7702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2b6f7b08df80 a2=98 a3=0 items=0 ppid=7691 pid=7702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333036376465656166383465613861336337313264363230 Jun 12 23:03:34.396000 audit: BPF prog-id=300 op=UNLOAD Jun 12 23:03:34.396000 audit[7702]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7691 pid=7702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333036376465656166383465613861336337313264363230 Jun 12 23:03:34.396000 audit: BPF prog-id=301 op=LOAD Jun 12 23:03:34.396000 audit[7702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2b6f7b08e258 a2=98 a3=0 items=0 ppid=7691 pid=7702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333036376465656166383465613861336337313264363230 Jun 12 23:03:34.401000 audit: BPF prog-id=302 op=LOAD Jun 12 23:03:34.401000 audit[7702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2b6f7b08df98 a2=98 a3=0 items=0 ppid=7691 pid=7702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333036376465656166383465613861336337313264363230 Jun 12 23:03:34.401000 audit: BPF prog-id=302 op=UNLOAD Jun 12 23:03:34.401000 audit[7702]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7691 pid=7702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333036376465656166383465613861336337313264363230 Jun 12 23:03:34.401000 audit: BPF prog-id=301 op=UNLOAD Jun 12 23:03:34.401000 audit[7702]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7691 pid=7702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333036376465656166383465613861336337313264363230 Jun 12 23:03:34.401000 audit: BPF prog-id=303 op=LOAD Jun 12 23:03:34.401000 audit[7702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2b6f7b08e4a8 a2=98 a3=0 items=0 ppid=7691 pid=7702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30333036376465656166383465613861336337313264363230 Jun 12 23:03:34.425710 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:34.432995 kernel: docker0: port 1(veth18d0e41) entered blocking state Jun 12 23:03:34.433055 kernel: docker0: port 1(veth18d0e41) entered disabled state Jun 12 23:03:34.435918 kernel: veth18d0e41: entered allmulticast mode Jun 12 23:03:34.439204 kernel: veth18d0e41: entered promiscuous mode Jun 12 23:03:34.424000 audit: ANOM_PROMISCUOUS dev=veth18d0e41 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:34.424000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f8480 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.424000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:34.439000 audit[7727]: NETFILTER_CFG table=raw:139 family=2 entries=1 op=nft_register_rule pid=7727 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:34.439000 audit[7727]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd13098e0 a2=0 a3=0 items=0 ppid=2935 pid=7727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:34.439000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:34.442612 systemd-networkd[2176]: veth18d0e41: Link UP Jun 12 23:03:34.458801 kernel: eth0: renamed from vethd8f8258 Jun 12 23:03:34.465997 kernel: docker0: port 1(veth18d0e41) entered blocking state Jun 12 23:03:34.466054 kernel: docker0: port 1(veth18d0e41) entered forwarding state Jun 12 23:03:34.466503 systemd-networkd[2176]: veth18d0e41: Gained carrier Jun 12 23:03:34.467226 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:34.930049 sshd[7722]: Invalid user teste from 43.160.253.60 port 57516 Jun 12 23:03:35.091685 sshd[7722]: Connection closed by invalid user teste 43.160.253.60 port 57516 [preauth] Jun 12 23:03:35.090000 audit[7722]: AUDIT1109 pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:35.093229 systemd[1]: sshd@57-4115-10.0.0.35:22-43.160.253.60:57516.service: Deactivated successfully. Jun 12 23:03:35.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-4115-10.0.0.35:22-43.160.253.60:57516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:35.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-40-10.0.0.35:22-43.160.253.60:57532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:35.263427 systemd[1]: Started sshd@58-40-10.0.0.35:22-43.160.253.60:57532.service - OpenSSH per-connection server daemon (43.160.253.60:57532). Jun 12 23:03:35.491400 systemd[1]: docker-03067deeaf84ea8a3c712d6205ef046f022db49af176502cd84023956575cc70.scope: Deactivated successfully. Jun 12 23:03:35.503030 dockerd[2935]: time="2026-06-12T23:03:35.502985014Z" level=info msg="ignoring event" container=03067deeaf84ea8a3c712d6205ef046f022db49af176502cd84023956575cc70 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:35.504015 containerd[2455]: time="2026-06-12T23:03:35.503947800Z" level=info msg="shim disconnected" id=03067deeaf84ea8a3c712d6205ef046f022db49af176502cd84023956575cc70 namespace=moby Jun 12 23:03:35.504015 containerd[2455]: time="2026-06-12T23:03:35.503978767Z" level=info msg="cleaning up after shim disconnected" id=03067deeaf84ea8a3c712d6205ef046f022db49af176502cd84023956575cc70 namespace=moby Jun 12 23:03:35.504015 containerd[2455]: time="2026-06-12T23:03:35.503985343Z" level=info msg="cleaning up dead shim" id=03067deeaf84ea8a3c712d6205ef046f022db49af176502cd84023956575cc70 namespace=moby Jun 12 23:03:35.524583 systemd-networkd[2176]: veth18d0e41: Lost carrier Jun 12 23:03:35.525083 kernel: docker0: port 1(veth18d0e41) entered disabled state Jun 12 23:03:35.528803 kernel: vethd8f8258: renamed from eth0 Jun 12 23:03:35.543000 audit[7764]: NETFILTER_CFG table=raw:140 family=2 entries=1 op=nft_unregister_rule pid=7764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:35.543000 audit[7764]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe5035e70 a2=0 a3=0 items=0 ppid=2935 pid=7764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.543000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:35.560248 systemd-networkd[2176]: veth18d0e41: Link DOWN Jun 12 23:03:35.563795 kernel: docker0: port 1(veth18d0e41) entered disabled state Jun 12 23:03:35.571166 kernel: veth18d0e41 (unregistering): left allmulticast mode Jun 12 23:03:35.571217 kernel: veth18d0e41 (unregistering): left promiscuous mode Jun 12 23:03:35.558000 audit: ANOM_PROMISCUOUS dev=veth18d0e41 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:35.575036 kernel: docker0: port 1(veth18d0e41) entered disabled state Jun 12 23:03:35.558000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8da5e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.558000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:35.587141 systemd[1]: run-docker-netns-290421c15a87.mount: Deactivated successfully. Jun 12 23:03:35.590338 systemd[1]: var-lib-docker-overlay2-5b8b7f8bdfca8e3f49ff4e847b02146795d4aecd9cb95d3b7a97863e2944f7eb-merged.mount: Deactivated successfully. Jun 12 23:03:35.599000 audit: BPF prog-id=299 op=UNLOAD Jun 12 23:03:35.599000 audit: BPF prog-id=303 op=UNLOAD Jun 12 23:03:35.695121 systemd[1]: var-lib-docker-overlay2-c8dfb89ce0b6a658406ea28d5f96defff793291526984531f71852c5f8c3f480\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:35.765315 containerd[2455]: time="2026-06-12T23:03:35.765207111Z" level=info msg="connecting to shim ccf4fd39d5de18e1df40e0c5ac194315989ce4d0b12cb0523375d8a243af4d99" address="unix:///run/containerd/s/d293cf20555352eeb4a57c31dffbc2aee135004ddc5b394ce079ae197ad84764" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:35.776256 sshd[7739]: Invalid user linuxadmin from 43.160.253.60 port 57532 Jun 12 23:03:35.786934 systemd[1]: Started docker-ccf4fd39d5de18e1df40e0c5ac194315989ce4d0b12cb0523375d8a243af4d99.scope - libcontainer container ccf4fd39d5de18e1df40e0c5ac194315989ce4d0b12cb0523375d8a243af4d99. Jun 12 23:03:35.795000 audit: BPF prog-id=304 op=LOAD Jun 12 23:03:35.795000 audit: BPF prog-id=305 op=LOAD Jun 12 23:03:35.795000 audit[7795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6f49b7467f80 a2=98 a3=0 items=0 ppid=7783 pid=7795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636634666433396435646531386531646634306530633561 Jun 12 23:03:35.795000 audit: BPF prog-id=305 op=UNLOAD Jun 12 23:03:35.795000 audit[7795]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7783 pid=7795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636634666433396435646531386531646634306530633561 Jun 12 23:03:35.796000 audit: BPF prog-id=306 op=LOAD Jun 12 23:03:35.796000 audit[7795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6f49b7468258 a2=98 a3=0 items=0 ppid=7783 pid=7795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636634666433396435646531386531646634306530633561 Jun 12 23:03:35.796000 audit: BPF prog-id=307 op=LOAD Jun 12 23:03:35.796000 audit[7795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6f49b7467f98 a2=98 a3=0 items=0 ppid=7783 pid=7795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636634666433396435646531386531646634306530633561 Jun 12 23:03:35.796000 audit: BPF prog-id=307 op=UNLOAD Jun 12 23:03:35.796000 audit[7795]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=7783 pid=7795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636634666433396435646531386531646634306530633561 Jun 12 23:03:35.796000 audit: BPF prog-id=306 op=UNLOAD Jun 12 23:03:35.796000 audit[7795]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=7783 pid=7795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636634666433396435646531386531646634306530633561 Jun 12 23:03:35.796000 audit: BPF prog-id=308 op=LOAD Jun 12 23:03:35.796000 audit[7795]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6f49b74684a8 a2=98 a3=0 items=0 ppid=7783 pid=7795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63636634666433396435646531386531646634306530633561 Jun 12 23:03:35.818637 kernel: docker0: port 1(vetha5c0ad8) entered blocking state Jun 12 23:03:35.818738 kernel: docker0: port 1(vetha5c0ad8) entered disabled state Jun 12 23:03:35.821447 kernel: vetha5c0ad8: entered allmulticast mode Jun 12 23:03:35.809000 audit: ANOM_PROMISCUOUS dev=vetha5c0ad8 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:35.825100 kernel: vetha5c0ad8: entered promiscuous mode Jun 12 23:03:35.809000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f9560 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.809000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:35.824918 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:35.825000 audit[7817]: NETFILTER_CFG table=raw:141 family=2 entries=1 op=nft_register_rule pid=7817 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:35.825000 audit[7817]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd3ae1c70 a2=0 a3=0 items=0 ppid=2935 pid=7817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:35.825000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:35.831401 systemd-networkd[2176]: vetha5c0ad8: Link UP Jun 12 23:03:35.844855 kernel: eth0: renamed from vethb9f6ad3 Jun 12 23:03:35.852402 kernel: docker0: port 1(vetha5c0ad8) entered blocking state Jun 12 23:03:35.852567 kernel: docker0: port 1(vetha5c0ad8) entered forwarding state Jun 12 23:03:35.852468 systemd-networkd[2176]: vetha5c0ad8: Gained carrier Jun 12 23:03:35.853005 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:35.938762 sshd[7739]: Connection closed by invalid user linuxadmin 43.160.253.60 port 57532 [preauth] Jun 12 23:03:35.937000 audit[7739]: AUDIT1109 pid=7739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:35.940828 systemd[1]: sshd@58-40-10.0.0.35:22-43.160.253.60:57532.service: Deactivated successfully. Jun 12 23:03:35.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@58-40-10.0.0.35:22-43.160.253.60:57532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:36.110113 systemd[1]: Started sshd@59-41-10.0.0.35:22-43.160.253.60:55906.service - OpenSSH per-connection server daemon (43.160.253.60:55906). Jun 12 23:03:36.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-41-10.0.0.35:22-43.160.253.60:55906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:36.779816 sshd[7828]: Connection closed by authenticating user root 43.160.253.60 port 55906 [preauth] Jun 12 23:03:36.779000 audit[7828]: AUDIT1109 pid=7828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:36.781853 systemd[1]: sshd@59-41-10.0.0.35:22-43.160.253.60:55906.service: Deactivated successfully. Jun 12 23:03:36.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@59-41-10.0.0.35:22-43.160.253.60:55906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:36.876393 systemd[1]: docker-ccf4fd39d5de18e1df40e0c5ac194315989ce4d0b12cb0523375d8a243af4d99.scope: Deactivated successfully. Jun 12 23:03:36.889042 dockerd[2935]: time="2026-06-12T23:03:36.888965423Z" level=info msg="ignoring event" container=ccf4fd39d5de18e1df40e0c5ac194315989ce4d0b12cb0523375d8a243af4d99 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:36.889489 containerd[2455]: time="2026-06-12T23:03:36.888877939Z" level=info msg="shim disconnected" id=ccf4fd39d5de18e1df40e0c5ac194315989ce4d0b12cb0523375d8a243af4d99 namespace=moby Jun 12 23:03:36.889692 containerd[2455]: time="2026-06-12T23:03:36.889488095Z" level=info msg="cleaning up after shim disconnected" id=ccf4fd39d5de18e1df40e0c5ac194315989ce4d0b12cb0523375d8a243af4d99 namespace=moby Jun 12 23:03:36.889692 containerd[2455]: time="2026-06-12T23:03:36.889497254Z" level=info msg="cleaning up dead shim" id=ccf4fd39d5de18e1df40e0c5ac194315989ce4d0b12cb0523375d8a243af4d99 namespace=moby Jun 12 23:03:36.910563 systemd-networkd[2176]: vetha5c0ad8: Lost carrier Jun 12 23:03:36.911078 kernel: docker0: port 1(vetha5c0ad8) entered disabled state Jun 12 23:03:36.913797 kernel: vethb9f6ad3: renamed from eth0 Jun 12 23:03:36.927000 audit[7856]: NETFILTER_CFG table=raw:142 family=2 entries=1 op=nft_unregister_rule pid=7856 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:36.927000 audit[7856]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff6e72640 a2=0 a3=0 items=0 ppid=2935 pid=7856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:36.927000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:36.932288 systemd-networkd[2176]: vetha5c0ad8: Link DOWN Jun 12 23:03:36.939437 kernel: docker0: port 1(vetha5c0ad8) entered disabled state Jun 12 23:03:36.939499 kernel: vetha5c0ad8 (unregistering): left allmulticast mode Jun 12 23:03:36.943051 kernel: vetha5c0ad8 (unregistering): left promiscuous mode Jun 12 23:03:36.931000 audit: ANOM_PROMISCUOUS dev=vetha5c0ad8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:36.946753 kernel: docker0: port 1(vetha5c0ad8) entered disabled state Jun 12 23:03:36.931000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b4f1ae0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:36.931000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:36.958399 systemd[1]: Started sshd@60-42-10.0.0.35:22-43.160.253.60:55910.service - OpenSSH per-connection server daemon (43.160.253.60:55910). Jun 12 23:03:36.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-42-10.0.0.35:22-43.160.253.60:55910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:36.960100 systemd[1]: run-docker-netns-dfccdc93bc20.mount: Deactivated successfully. Jun 12 23:03:36.963549 systemd[1]: var-lib-docker-overlay2-c8dfb89ce0b6a658406ea28d5f96defff793291526984531f71852c5f8c3f480-merged.mount: Deactivated successfully. Jun 12 23:03:36.973000 audit: BPF prog-id=304 op=UNLOAD Jun 12 23:03:36.973000 audit: BPF prog-id=308 op=UNLOAD Jun 12 23:03:37.044359 systemd[1]: var-lib-docker-overlay2-679d2dfc7d7ffd4c15432cb5434e742da2f17ab7f4d68bd1e6eade1f7d3fbe16\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:37.116811 containerd[2455]: time="2026-06-12T23:03:37.116255583Z" level=info msg="connecting to shim e431c8cb11cb573417a52ab82d237b9b02f4aacb9c4105df3acdbc72fd067692" address="unix:///run/containerd/s/96b3035bfd269e8e87a5f92385a205c88928473eecc306a4ed2205d018406c8a" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:37.135940 systemd[1]: Started docker-e431c8cb11cb573417a52ab82d237b9b02f4aacb9c4105df3acdbc72fd067692.scope - libcontainer container e431c8cb11cb573417a52ab82d237b9b02f4aacb9c4105df3acdbc72fd067692. Jun 12 23:03:37.146000 audit: BPF prog-id=309 op=LOAD Jun 12 23:03:37.146000 audit: BPF prog-id=310 op=LOAD Jun 12 23:03:37.146000 audit[7889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=830bf437f80 a2=98 a3=0 items=0 ppid=7877 pid=7889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:37.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343331633863623131636235373334313761353261623832 Jun 12 23:03:37.146000 audit: BPF prog-id=310 op=UNLOAD Jun 12 23:03:37.146000 audit[7889]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7877 pid=7889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:37.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343331633863623131636235373334313761353261623832 Jun 12 23:03:37.146000 audit: BPF prog-id=311 op=LOAD Jun 12 23:03:37.146000 audit[7889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=830bf438258 a2=98 a3=0 items=0 ppid=7877 pid=7889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:37.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343331633863623131636235373334313761353261623832 Jun 12 23:03:37.146000 audit: BPF prog-id=312 op=LOAD Jun 12 23:03:37.146000 audit[7889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=830bf437f98 a2=98 a3=0 items=0 ppid=7877 pid=7889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:37.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343331633863623131636235373334313761353261623832 Jun 12 23:03:37.147000 audit: BPF prog-id=312 op=UNLOAD Jun 12 23:03:37.147000 audit[7889]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=7877 pid=7889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:37.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343331633863623131636235373334313761353261623832 Jun 12 23:03:37.147000 audit: BPF prog-id=311 op=UNLOAD Jun 12 23:03:37.147000 audit[7889]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7877 pid=7889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:37.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343331633863623131636235373334313761353261623832 Jun 12 23:03:37.147000 audit: BPF prog-id=313 op=LOAD Jun 12 23:03:37.147000 audit[7889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=830bf4384a8 a2=98 a3=0 items=0 ppid=7877 pid=7889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:37.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65343331633863623131636235373334313761353261623832 Jun 12 23:03:37.161026 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:37.168417 kernel: docker0: port 1(veth8c257c7) entered blocking state Jun 12 23:03:37.168488 kernel: docker0: port 1(veth8c257c7) entered disabled state Jun 12 23:03:37.172745 kernel: veth8c257c7: entered allmulticast mode Jun 12 23:03:37.175765 kernel: veth8c257c7: entered promiscuous mode Jun 12 23:03:37.160000 audit: ANOM_PROMISCUOUS dev=veth8c257c7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:37.160000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b241920 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:37.160000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:37.177000 audit[7909]: NETFILTER_CFG table=raw:143 family=2 entries=1 op=nft_register_rule pid=7909 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:37.177000 audit[7909]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc0052220 a2=0 a3=0 items=0 ppid=2935 pid=7909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:37.177000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:37.178961 systemd-networkd[2176]: veth8c257c7: Link UP Jun 12 23:03:37.196878 kernel: eth0: renamed from veth0a751b4 Jun 12 23:03:37.196944 kernel: docker0: port 1(veth8c257c7) entered blocking state Jun 12 23:03:37.200420 kernel: docker0: port 1(veth8c257c7) entered forwarding state Jun 12 23:03:37.200688 systemd-networkd[2176]: veth8c257c7: Gained carrier Jun 12 23:03:37.201526 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:37.469238 sshd[7858]: Invalid user admin from 43.160.253.60 port 55910 Jun 12 23:03:37.631191 sshd[7858]: Connection closed by invalid user admin 43.160.253.60 port 55910 [preauth] Jun 12 23:03:37.630000 audit[7858]: AUDIT1109 pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:37.632982 systemd[1]: sshd@60-42-10.0.0.35:22-43.160.253.60:55910.service: Deactivated successfully. Jun 12 23:03:37.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@60-42-10.0.0.35:22-43.160.253.60:55910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:37.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-43-10.0.0.35:22-43.160.253.60:55912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:37.806197 systemd[1]: Started sshd@61-43-10.0.0.35:22-43.160.253.60:55912.service - OpenSSH per-connection server daemon (43.160.253.60:55912). Jun 12 23:03:38.229812 systemd[1]: docker-e431c8cb11cb573417a52ab82d237b9b02f4aacb9c4105df3acdbc72fd067692.scope: Deactivated successfully. Jun 12 23:03:38.241579 dockerd[2935]: time="2026-06-12T23:03:38.241478754Z" level=info msg="ignoring event" container=e431c8cb11cb573417a52ab82d237b9b02f4aacb9c4105df3acdbc72fd067692 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:38.241889 containerd[2455]: time="2026-06-12T23:03:38.241560542Z" level=info msg="shim disconnected" id=e431c8cb11cb573417a52ab82d237b9b02f4aacb9c4105df3acdbc72fd067692 namespace=moby Jun 12 23:03:38.241889 containerd[2455]: time="2026-06-12T23:03:38.241586701Z" level=info msg="cleaning up after shim disconnected" id=e431c8cb11cb573417a52ab82d237b9b02f4aacb9c4105df3acdbc72fd067692 namespace=moby Jun 12 23:03:38.241889 containerd[2455]: time="2026-06-12T23:03:38.241596205Z" level=info msg="cleaning up dead shim" id=e431c8cb11cb573417a52ab82d237b9b02f4aacb9c4105df3acdbc72fd067692 namespace=moby Jun 12 23:03:38.262122 systemd-networkd[2176]: veth8c257c7: Lost carrier Jun 12 23:03:38.262804 kernel: docker0: port 1(veth8c257c7) entered disabled state Jun 12 23:03:38.262854 kernel: veth0a751b4: renamed from eth0 Jun 12 23:03:38.284000 audit[7946]: NETFILTER_CFG table=raw:144 family=2 entries=1 op=nft_unregister_rule pid=7946 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:38.284000 audit[7946]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffca5aa010 a2=0 a3=0 items=0 ppid=2935 pid=7946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.284000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:38.292324 systemd-networkd[2176]: veth8c257c7: Link DOWN Jun 12 23:03:38.300263 kernel: docker0: port 1(veth8c257c7) entered disabled state Jun 12 23:03:38.300322 kernel: veth8c257c7 (unregistering): left allmulticast mode Jun 12 23:03:38.303589 kernel: veth8c257c7 (unregistering): left promiscuous mode Jun 12 23:03:38.291000 audit: ANOM_PROMISCUOUS dev=veth8c257c7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:38.307148 kernel: docker0: port 1(veth8c257c7) entered disabled state Jun 12 23:03:38.291000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bd8b0e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.291000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:38.314394 systemd[1]: run-docker-netns-12ad1e9dd4b7.mount: Deactivated successfully. Jun 12 23:03:38.316411 sshd[7921]: Invalid user deploy from 43.160.253.60 port 55912 Jun 12 23:03:38.319438 systemd[1]: var-lib-docker-overlay2-679d2dfc7d7ffd4c15432cb5434e742da2f17ab7f4d68bd1e6eade1f7d3fbe16-merged.mount: Deactivated successfully. Jun 12 23:03:38.328000 audit: BPF prog-id=309 op=UNLOAD Jun 12 23:03:38.328000 audit: BPF prog-id=313 op=UNLOAD Jun 12 23:03:38.447448 containerd[2455]: time="2026-06-12T23:03:38.447383488Z" level=info msg="connecting to shim 6689293b137b2abdef6fc5d0fee26bbc0f1e19818a192d9de8eb182b8a7e7273" address="unix:///run/containerd/s/b2c93725e5b66c8494bbde6941cbfe63634b30472b8f97f24520c853936fd356" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:38.465183 systemd[1]: Started docker-6689293b137b2abdef6fc5d0fee26bbc0f1e19818a192d9de8eb182b8a7e7273.scope - libcontainer container 6689293b137b2abdef6fc5d0fee26bbc0f1e19818a192d9de8eb182b8a7e7273. Jun 12 23:03:38.473000 audit: BPF prog-id=314 op=LOAD Jun 12 23:03:38.473000 audit: BPF prog-id=315 op=LOAD Jun 12 23:03:38.473000 audit[7977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=6640ae2b7f80 a2=98 a3=0 items=0 ppid=7965 pid=7977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36363839323933623133376232616264656636666335643066 Jun 12 23:03:38.473000 audit: BPF prog-id=315 op=UNLOAD Jun 12 23:03:38.473000 audit[7977]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7965 pid=7977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36363839323933623133376232616264656636666335643066 Jun 12 23:03:38.473000 audit: BPF prog-id=316 op=LOAD Jun 12 23:03:38.473000 audit[7977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=6640ae2b8258 a2=98 a3=0 items=0 ppid=7965 pid=7977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36363839323933623133376232616264656636666335643066 Jun 12 23:03:38.474000 audit: BPF prog-id=317 op=LOAD Jun 12 23:03:38.474000 audit[7977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=6640ae2b7f98 a2=98 a3=0 items=0 ppid=7965 pid=7977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36363839323933623133376232616264656636666335643066 Jun 12 23:03:38.474000 audit: BPF prog-id=317 op=UNLOAD Jun 12 23:03:38.474000 audit[7977]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=7965 pid=7977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36363839323933623133376232616264656636666335643066 Jun 12 23:03:38.474000 audit: BPF prog-id=316 op=UNLOAD Jun 12 23:03:38.474000 audit[7977]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=7965 pid=7977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36363839323933623133376232616264656636666335643066 Jun 12 23:03:38.474000 audit: BPF prog-id=318 op=LOAD Jun 12 23:03:38.474000 audit[7977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=6640ae2b84a8 a2=98 a3=0 items=0 ppid=7965 pid=7977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36363839323933623133376232616264656636666335643066 Jun 12 23:03:38.477844 sshd[7921]: Connection closed by invalid user deploy 43.160.253.60 port 55912 [preauth] Jun 12 23:03:38.477000 audit[7921]: AUDIT1109 pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:38.480442 systemd[1]: sshd@61-43-10.0.0.35:22-43.160.253.60:55912.service: Deactivated successfully. Jun 12 23:03:38.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@61-43-10.0.0.35:22-43.160.253.60:55912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:38.492571 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:38.495965 kernel: docker0: port 1(veth50ba57a) entered blocking state Jun 12 23:03:38.496023 kernel: docker0: port 1(veth50ba57a) entered disabled state Jun 12 23:03:38.498811 kernel: veth50ba57a: entered allmulticast mode Jun 12 23:03:38.501788 kernel: veth50ba57a: entered promiscuous mode Jun 12 23:03:38.487000 audit: ANOM_PROMISCUOUS dev=veth50ba57a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:38.487000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0cde0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.487000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:38.503000 audit[8000]: NETFILTER_CFG table=raw:145 family=2 entries=1 op=nft_register_rule pid=8000 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:38.503000 audit[8000]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd1913e10 a2=0 a3=0 items=0 ppid=2935 pid=8000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:38.503000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:38.504482 systemd-networkd[2176]: veth50ba57a: Link UP Jun 12 23:03:38.521792 kernel: eth0: renamed from vethf8a9c64 Jun 12 23:03:38.521863 kernel: docker0: port 1(veth50ba57a) entered blocking state Jun 12 23:03:38.521880 kernel: docker0: port 1(veth50ba57a) entered forwarding state Jun 12 23:03:38.524718 systemd-networkd[2176]: veth50ba57a: Gained carrier Jun 12 23:03:38.525129 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:38.655487 systemd[1]: Started sshd@62-4116-10.0.0.35:22-43.160.253.60:55928.service - OpenSSH per-connection server daemon (43.160.253.60:55928). Jun 12 23:03:38.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-4116-10.0.0.35:22-43.160.253.60:55928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:39.170008 sshd[8010]: Invalid user oracle from 43.160.253.60 port 55928 Jun 12 23:03:39.332121 sshd[8010]: Connection closed by invalid user oracle 43.160.253.60 port 55928 [preauth] Jun 12 23:03:39.331000 audit[8010]: AUDIT1109 pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:39.335944 kernel: kauditd_printk_skb: 149 callbacks suppressed Jun 12 23:03:39.336069 kernel: audit: type=1109 audit(1781305419.331:1257): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:39.336982 systemd[1]: sshd@62-4116-10.0.0.35:22-43.160.253.60:55928.service: Deactivated successfully. Jun 12 23:03:39.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-4116-10.0.0.35:22-43.160.253.60:55928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:39.363333 kernel: audit: type=1131 audit(1781305419.338:1258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@62-4116-10.0.0.35:22-43.160.253.60:55928 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:39.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-4117-10.0.0.35:22-43.160.253.60:55940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:39.525056 systemd[1]: Started sshd@63-4117-10.0.0.35:22-43.160.253.60:55940.service - OpenSSH per-connection server daemon (43.160.253.60:55940). Jun 12 23:03:39.539841 kernel: audit: type=1130 audit(1781305419.524:1259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-4117-10.0.0.35:22-43.160.253.60:55940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:39.554345 systemd[1]: docker-6689293b137b2abdef6fc5d0fee26bbc0f1e19818a192d9de8eb182b8a7e7273.scope: Deactivated successfully. Jun 12 23:03:39.565887 dockerd[2935]: time="2026-06-12T23:03:39.565856764Z" level=info msg="ignoring event" container=6689293b137b2abdef6fc5d0fee26bbc0f1e19818a192d9de8eb182b8a7e7273 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:39.566369 containerd[2455]: time="2026-06-12T23:03:39.566329988Z" level=info msg="shim disconnected" id=6689293b137b2abdef6fc5d0fee26bbc0f1e19818a192d9de8eb182b8a7e7273 namespace=moby Jun 12 23:03:39.566369 containerd[2455]: time="2026-06-12T23:03:39.566366403Z" level=info msg="cleaning up after shim disconnected" id=6689293b137b2abdef6fc5d0fee26bbc0f1e19818a192d9de8eb182b8a7e7273 namespace=moby Jun 12 23:03:39.566608 containerd[2455]: time="2026-06-12T23:03:39.566374778Z" level=info msg="cleaning up dead shim" id=6689293b137b2abdef6fc5d0fee26bbc0f1e19818a192d9de8eb182b8a7e7273 namespace=moby Jun 12 23:03:39.589184 kernel: docker0: port 1(veth50ba57a) entered disabled state Jun 12 23:03:39.588914 systemd-networkd[2176]: veth50ba57a: Lost carrier Jun 12 23:03:39.592799 kernel: vethf8a9c64: renamed from eth0 Jun 12 23:03:39.603000 audit[8041]: NETFILTER_CFG table=raw:146 family=2 entries=1 op=nft_unregister_rule pid=8041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:39.603000 audit[8041]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd2800630 a2=0 a3=0 items=0 ppid=2935 pid=8041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.630634 kernel: audit: type=1325 audit(1781305419.603:1260): table=raw:146 family=2 entries=1 op=nft_unregister_rule pid=8041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:39.630681 kernel: audit: type=1300 audit(1781305419.603:1260): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd2800630 a2=0 a3=0 items=0 ppid=2935 pid=8041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.603000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:39.641644 kernel: audit: type=1327 audit(1781305419.603:1260): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:39.642588 systemd-networkd[2176]: veth50ba57a: Link DOWN Jun 12 23:03:39.646874 kernel: docker0: port 1(veth50ba57a) entered disabled state Jun 12 23:03:39.654801 kernel: veth50ba57a (unregistering): left allmulticast mode Jun 12 23:03:39.654879 kernel: veth50ba57a (unregistering): left promiscuous mode Jun 12 23:03:39.641000 audit: ANOM_PROMISCUOUS dev=veth50ba57a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:39.659885 kernel: docker0: port 1(veth50ba57a) entered disabled state Jun 12 23:03:39.659927 kernel: audit: type=1700 audit(1781305419.641:1261): dev=veth50ba57a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:39.641000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6ac0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.641000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:39.706878 kernel: audit: type=1300 audit(1781305419.641:1261): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6ac0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.706967 kernel: audit: type=1327 audit(1781305419.641:1261): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:39.708409 systemd[1]: run-docker-netns-2c09a92a9ec5.mount: Deactivated successfully. Jun 12 23:03:39.712940 systemd[1]: var-lib-docker-overlay2-f910d91d334b90c0d6e1bd7ae9e8583eec7a0e3b97db0e0a813671decc523e17-merged.mount: Deactivated successfully. Jun 12 23:03:39.721000 audit: BPF prog-id=314 op=UNLOAD Jun 12 23:03:39.721000 audit: BPF prog-id=318 op=UNLOAD Jun 12 23:03:39.742714 kernel: audit: type=1334 audit(1781305419.721:1262): prog-id=314 op=UNLOAD Jun 12 23:03:39.879786 containerd[2455]: time="2026-06-12T23:03:39.879349744Z" level=info msg="connecting to shim 23315300da4a9f7319c743bbf34c4e8d95146dec2182653ef6abae18f378ee6a" address="unix:///run/containerd/s/9cd459852ed5a1fc837733d9fef17585fd84dc056e313acda481d8f2ffbc0ba0" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:39.898961 systemd[1]: Started docker-23315300da4a9f7319c743bbf34c4e8d95146dec2182653ef6abae18f378ee6a.scope - libcontainer container 23315300da4a9f7319c743bbf34c4e8d95146dec2182653ef6abae18f378ee6a. Jun 12 23:03:39.906000 audit: BPF prog-id=319 op=LOAD Jun 12 23:03:39.906000 audit: BPF prog-id=320 op=LOAD Jun 12 23:03:39.906000 audit[8070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=69e75f10df80 a2=98 a3=0 items=0 ppid=8059 pid=8070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333331353330306461346139663733313963373433626266 Jun 12 23:03:39.906000 audit: BPF prog-id=320 op=UNLOAD Jun 12 23:03:39.906000 audit[8070]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8059 pid=8070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333331353330306461346139663733313963373433626266 Jun 12 23:03:39.907000 audit: BPF prog-id=321 op=LOAD Jun 12 23:03:39.907000 audit[8070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=69e75f10e258 a2=98 a3=0 items=0 ppid=8059 pid=8070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333331353330306461346139663733313963373433626266 Jun 12 23:03:39.907000 audit: BPF prog-id=322 op=LOAD Jun 12 23:03:39.907000 audit[8070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=69e75f10df98 a2=98 a3=0 items=0 ppid=8059 pid=8070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333331353330306461346139663733313963373433626266 Jun 12 23:03:39.907000 audit: BPF prog-id=322 op=UNLOAD Jun 12 23:03:39.907000 audit[8070]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8059 pid=8070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333331353330306461346139663733313963373433626266 Jun 12 23:03:39.907000 audit: BPF prog-id=321 op=UNLOAD Jun 12 23:03:39.907000 audit[8070]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8059 pid=8070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333331353330306461346139663733313963373433626266 Jun 12 23:03:39.907000 audit: BPF prog-id=323 op=LOAD Jun 12 23:03:39.907000 audit[8070]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=69e75f10e4a8 a2=98 a3=0 items=0 ppid=8059 pid=8070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333331353330306461346139663733313963373433626266 Jun 12 23:03:39.928346 kernel: docker0: port 1(veth10e59dc) entered blocking state Jun 12 23:03:39.928435 kernel: docker0: port 1(veth10e59dc) entered disabled state Jun 12 23:03:39.931295 kernel: veth10e59dc: entered allmulticast mode Jun 12 23:03:39.934196 kernel: veth10e59dc: entered promiscuous mode Jun 12 23:03:39.919000 audit: ANOM_PROMISCUOUS dev=veth10e59dc prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:39.919000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b945bf0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.919000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:39.934930 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:39.937000 audit[8093]: NETFILTER_CFG table=raw:147 family=2 entries=1 op=nft_register_rule pid=8093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:39.937000 audit[8093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffff1ef20 a2=0 a3=0 items=0 ppid=2935 pid=8093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:39.937000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:39.940280 systemd-networkd[2176]: veth10e59dc: Link UP Jun 12 23:03:39.957047 kernel: eth0: renamed from vethe5ae42e Jun 12 23:03:39.957114 kernel: docker0: port 1(veth10e59dc) entered blocking state Jun 12 23:03:39.960617 kernel: docker0: port 1(veth10e59dc) entered forwarding state Jun 12 23:03:39.960994 systemd-networkd[2176]: veth10e59dc: Gained carrier Jun 12 23:03:39.961574 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:40.055970 sshd[8016]: Invalid user max from 43.160.253.60 port 55940 Jun 12 23:03:40.218000 audit[8016]: AUDIT1109 pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:40.219118 sshd[8016]: Connection closed by invalid user max 43.160.253.60 port 55940 [preauth] Jun 12 23:03:40.220520 systemd[1]: sshd@63-4117-10.0.0.35:22-43.160.253.60:55940.service: Deactivated successfully. Jun 12 23:03:40.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@63-4117-10.0.0.35:22-43.160.253.60:55940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:40.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-4118-10.0.0.35:22-43.160.253.60:55944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:40.388463 systemd[1]: Started sshd@64-4118-10.0.0.35:22-43.160.253.60:55944.service - OpenSSH per-connection server daemon (43.160.253.60:55944). Jun 12 23:03:40.902945 sshd[8104]: Invalid user ai from 43.160.253.60 port 55944 Jun 12 23:03:40.987007 systemd[1]: docker-23315300da4a9f7319c743bbf34c4e8d95146dec2182653ef6abae18f378ee6a.scope: Deactivated successfully. Jun 12 23:03:40.998492 containerd[2455]: time="2026-06-12T23:03:40.998447755Z" level=info msg="shim disconnected" id=23315300da4a9f7319c743bbf34c4e8d95146dec2182653ef6abae18f378ee6a namespace=moby Jun 12 23:03:40.998900 containerd[2455]: time="2026-06-12T23:03:40.998579332Z" level=info msg="cleaning up after shim disconnected" id=23315300da4a9f7319c743bbf34c4e8d95146dec2182653ef6abae18f378ee6a namespace=moby Jun 12 23:03:40.998900 containerd[2455]: time="2026-06-12T23:03:40.998592851Z" level=info msg="cleaning up dead shim" id=23315300da4a9f7319c743bbf34c4e8d95146dec2182653ef6abae18f378ee6a namespace=moby Jun 12 23:03:40.998941 dockerd[2935]: time="2026-06-12T23:03:40.998542078Z" level=info msg="ignoring event" container=23315300da4a9f7319c743bbf34c4e8d95146dec2182653ef6abae18f378ee6a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:41.024517 kernel: vethe5ae42e: renamed from eth0 Jun 12 23:03:41.023814 systemd-networkd[2176]: veth10e59dc: Lost carrier Jun 12 23:03:41.024873 kernel: docker0: port 1(veth10e59dc) entered disabled state Jun 12 23:03:41.035000 audit[8129]: NETFILTER_CFG table=raw:148 family=2 entries=1 op=nft_unregister_rule pid=8129 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:41.035000 audit[8129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe66c29e0 a2=0 a3=0 items=0 ppid=2935 pid=8129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.035000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:41.048188 systemd-networkd[2176]: veth10e59dc: Link DOWN Jun 12 23:03:41.053042 kernel: docker0: port 1(veth10e59dc) entered disabled state Jun 12 23:03:41.053099 kernel: veth10e59dc (unregistering): left allmulticast mode Jun 12 23:03:41.060210 kernel: veth10e59dc (unregistering): left promiscuous mode Jun 12 23:03:41.047000 audit: ANOM_PROMISCUOUS dev=veth10e59dc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:41.065008 kernel: docker0: port 1(veth10e59dc) entered disabled state Jun 12 23:03:41.065408 sshd[8104]: Connection closed by invalid user ai 43.160.253.60 port 55944 [preauth] Jun 12 23:03:41.065000 audit[8104]: AUDIT1109 pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:41.068006 systemd[1]: sshd@64-4118-10.0.0.35:22-43.160.253.60:55944.service: Deactivated successfully. Jun 12 23:03:41.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@64-4118-10.0.0.35:22-43.160.253.60:55944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:41.047000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f71a0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.047000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:41.074188 systemd[1]: run-docker-netns-3189a0a803f5.mount: Deactivated successfully. Jun 12 23:03:41.077587 systemd[1]: var-lib-docker-overlay2-47b35152796a7d79f5a02bb61bd652a2be6737b1ee9d2541a222a15acae4fc9f-merged.mount: Deactivated successfully. Jun 12 23:03:41.089000 audit: BPF prog-id=319 op=UNLOAD Jun 12 23:03:41.089000 audit: BPF prog-id=323 op=UNLOAD Jun 12 23:03:41.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-4119-10.0.0.35:22-43.160.253.60:55958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:41.238007 systemd[1]: Started sshd@65-4119-10.0.0.35:22-43.160.253.60:55958.service - OpenSSH per-connection server daemon (43.160.253.60:55958). Jun 12 23:03:41.253804 containerd[2455]: time="2026-06-12T23:03:41.252927668Z" level=info msg="connecting to shim 2874af22c1140e0f855e7cae50a1d74994c3880f463a2893bdab7f4417a30159" address="unix:///run/containerd/s/dd38b5c4b67a3ff286254e2ef6f1681448b042d6497a20f25ec35e0d706d4d79" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:41.272941 systemd[1]: Started docker-2874af22c1140e0f855e7cae50a1d74994c3880f463a2893bdab7f4417a30159.scope - libcontainer container 2874af22c1140e0f855e7cae50a1d74994c3880f463a2893bdab7f4417a30159. Jun 12 23:03:41.281000 audit: BPF prog-id=324 op=LOAD Jun 12 23:03:41.281000 audit: BPF prog-id=325 op=LOAD Jun 12 23:03:41.281000 audit[8166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6185c542ff80 a2=98 a3=0 items=0 ppid=8150 pid=8166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32383734616632326331313430653066383535653763616535 Jun 12 23:03:41.281000 audit: BPF prog-id=325 op=UNLOAD Jun 12 23:03:41.281000 audit[8166]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8150 pid=8166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32383734616632326331313430653066383535653763616535 Jun 12 23:03:41.281000 audit: BPF prog-id=326 op=LOAD Jun 12 23:03:41.281000 audit[8166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6185c5430258 a2=98 a3=0 items=0 ppid=8150 pid=8166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32383734616632326331313430653066383535653763616535 Jun 12 23:03:41.281000 audit: BPF prog-id=327 op=LOAD Jun 12 23:03:41.281000 audit[8166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6185c542ff98 a2=98 a3=0 items=0 ppid=8150 pid=8166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32383734616632326331313430653066383535653763616535 Jun 12 23:03:41.281000 audit: BPF prog-id=327 op=UNLOAD Jun 12 23:03:41.281000 audit[8166]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8150 pid=8166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32383734616632326331313430653066383535653763616535 Jun 12 23:03:41.282000 audit: BPF prog-id=326 op=UNLOAD Jun 12 23:03:41.282000 audit[8166]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8150 pid=8166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32383734616632326331313430653066383535653763616535 Jun 12 23:03:41.282000 audit: BPF prog-id=328 op=LOAD Jun 12 23:03:41.282000 audit[8166]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6185c54304a8 a2=98 a3=0 items=0 ppid=8150 pid=8166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32383734616632326331313430653066383535653763616535 Jun 12 23:03:41.301528 kernel: docker0: port 1(veth1028e94) entered blocking state Jun 12 23:03:41.301612 kernel: docker0: port 1(veth1028e94) entered disabled state Jun 12 23:03:41.305019 kernel: veth1028e94: entered allmulticast mode Jun 12 23:03:41.308332 kernel: veth1028e94: entered promiscuous mode Jun 12 23:03:41.293000 audit: ANOM_PROMISCUOUS dev=veth1028e94 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:41.293000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b482240 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.293000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:41.309004 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:41.311000 audit[8187]: NETFILTER_CFG table=raw:149 family=2 entries=1 op=nft_register_rule pid=8187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:41.311000 audit[8187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd9f1e490 a2=0 a3=0 items=0 ppid=2935 pid=8187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:41.311000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:41.312733 systemd-networkd[2176]: veth1028e94: Link UP Jun 12 23:03:41.328804 kernel: eth0: renamed from veth86e9617 Jun 12 23:03:41.336938 kernel: docker0: port 1(veth1028e94) entered blocking state Jun 12 23:03:41.337013 kernel: docker0: port 1(veth1028e94) entered forwarding state Jun 12 23:03:41.337255 systemd-networkd[2176]: veth1028e94: Gained carrier Jun 12 23:03:41.337472 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:41.747121 sshd[8141]: Invalid user git from 43.160.253.60 port 55958 Jun 12 23:03:41.909844 sshd[8141]: Connection closed by invalid user git 43.160.253.60 port 55958 [preauth] Jun 12 23:03:41.909000 audit[8141]: AUDIT1109 pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:41.911234 systemd[1]: sshd@65-4119-10.0.0.35:22-43.160.253.60:55958.service: Deactivated successfully. Jun 12 23:03:41.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@65-4119-10.0.0.35:22-43.160.253.60:55958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:42.085863 systemd[1]: Started sshd@66-44-10.0.0.35:22-43.160.253.60:55964.service - OpenSSH per-connection server daemon (43.160.253.60:55964). Jun 12 23:03:42.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-44-10.0.0.35:22-43.160.253.60:55964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:42.363826 systemd[1]: docker-2874af22c1140e0f855e7cae50a1d74994c3880f463a2893bdab7f4417a30159.scope: Deactivated successfully. Jun 12 23:03:42.376306 dockerd[2935]: time="2026-06-12T23:03:42.376249149Z" level=info msg="ignoring event" container=2874af22c1140e0f855e7cae50a1d74994c3880f463a2893bdab7f4417a30159 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:42.376707 containerd[2455]: time="2026-06-12T23:03:42.376668128Z" level=info msg="shim disconnected" id=2874af22c1140e0f855e7cae50a1d74994c3880f463a2893bdab7f4417a30159 namespace=moby Jun 12 23:03:42.376707 containerd[2455]: time="2026-06-12T23:03:42.376702334Z" level=info msg="cleaning up after shim disconnected" id=2874af22c1140e0f855e7cae50a1d74994c3880f463a2893bdab7f4417a30159 namespace=moby Jun 12 23:03:42.376905 containerd[2455]: time="2026-06-12T23:03:42.376708750Z" level=info msg="cleaning up dead shim" id=2874af22c1140e0f855e7cae50a1d74994c3880f463a2893bdab7f4417a30159 namespace=moby Jun 12 23:03:42.401109 systemd-networkd[2176]: veth1028e94: Lost carrier Jun 12 23:03:42.401807 kernel: docker0: port 1(veth1028e94) entered disabled state Jun 12 23:03:42.401859 kernel: veth86e9617: renamed from eth0 Jun 12 23:03:42.428000 audit[8225]: NETFILTER_CFG table=raw:150 family=2 entries=1 op=nft_unregister_rule pid=8225 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:42.428000 audit[8225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc35c1530 a2=0 a3=0 items=0 ppid=2935 pid=8225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.428000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:42.435407 systemd-networkd[2176]: veth1028e94: Link DOWN Jun 12 23:03:42.439798 kernel: docker0: port 1(veth1028e94) entered disabled state Jun 12 23:03:42.448005 kernel: veth1028e94 (unregistering): left allmulticast mode Jun 12 23:03:42.448073 kernel: veth1028e94 (unregistering): left promiscuous mode Jun 12 23:03:42.434000 audit: ANOM_PROMISCUOUS dev=veth1028e94 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:42.451871 kernel: docker0: port 1(veth1028e94) entered disabled state Jun 12 23:03:42.434000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb0060 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.434000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:42.464196 systemd[1]: run-docker-netns-d002227609df.mount: Deactivated successfully. Jun 12 23:03:42.467192 systemd[1]: var-lib-docker-overlay2-cf3f9da572d6082828f4abc8e4e8e59959746aea5e59ec80f7f8655f1282387e-merged.mount: Deactivated successfully. Jun 12 23:03:42.479000 audit: BPF prog-id=324 op=UNLOAD Jun 12 23:03:42.479000 audit: BPF prog-id=328 op=UNLOAD Jun 12 23:03:42.548219 systemd[1]: var-lib-docker-overlay2-1d8e8235c548fdf9f973a440ab49ee331fb617aeec0763e77d5a862a95add904\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:42.603454 sshd[8199]: Invalid user gceuser from 43.160.253.60 port 55964 Jun 12 23:03:42.625744 containerd[2455]: time="2026-06-12T23:03:42.625549440Z" level=info msg="connecting to shim 3420604fb1f414ed1d2651ffa96ed8dc78b2358d3b700fbad6055009e2355e56" address="unix:///run/containerd/s/1ae205de94919be217121a137b2f1e7738e11905264a984d8bf64e09a895e59a" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:42.647969 systemd[1]: Started docker-3420604fb1f414ed1d2651ffa96ed8dc78b2358d3b700fbad6055009e2355e56.scope - libcontainer container 3420604fb1f414ed1d2651ffa96ed8dc78b2358d3b700fbad6055009e2355e56. Jun 12 23:03:42.655000 audit: BPF prog-id=329 op=LOAD Jun 12 23:03:42.656000 audit: BPF prog-id=330 op=LOAD Jun 12 23:03:42.656000 audit[8255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=127475637f80 a2=98 a3=0 items=0 ppid=8243 pid=8255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343230363034666231663431346564316432363531666661 Jun 12 23:03:42.656000 audit: BPF prog-id=330 op=UNLOAD Jun 12 23:03:42.656000 audit[8255]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8243 pid=8255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343230363034666231663431346564316432363531666661 Jun 12 23:03:42.656000 audit: BPF prog-id=331 op=LOAD Jun 12 23:03:42.656000 audit[8255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=127475638258 a2=98 a3=0 items=0 ppid=8243 pid=8255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343230363034666231663431346564316432363531666661 Jun 12 23:03:42.656000 audit: BPF prog-id=332 op=LOAD Jun 12 23:03:42.656000 audit[8255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=127475637f98 a2=98 a3=0 items=0 ppid=8243 pid=8255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.656000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343230363034666231663431346564316432363531666661 Jun 12 23:03:42.657000 audit: BPF prog-id=332 op=UNLOAD Jun 12 23:03:42.657000 audit[8255]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8243 pid=8255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.657000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343230363034666231663431346564316432363531666661 Jun 12 23:03:42.657000 audit: BPF prog-id=331 op=UNLOAD Jun 12 23:03:42.657000 audit[8255]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8243 pid=8255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.657000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343230363034666231663431346564316432363531666661 Jun 12 23:03:42.657000 audit: BPF prog-id=333 op=LOAD Jun 12 23:03:42.657000 audit[8255]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1274756384a8 a2=98 a3=0 items=0 ppid=8243 pid=8255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.657000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33343230363034666231663431346564316432363531666661 Jun 12 23:03:42.675245 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:42.679617 kernel: docker0: port 1(veth7a9a410) entered blocking state Jun 12 23:03:42.679654 kernel: docker0: port 1(veth7a9a410) entered disabled state Jun 12 23:03:42.683179 kernel: veth7a9a410: entered allmulticast mode Jun 12 23:03:42.686527 kernel: veth7a9a410: entered promiscuous mode Jun 12 23:03:42.669000 audit: ANOM_PROMISCUOUS dev=veth7a9a410 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:42.669000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaacc0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.669000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:42.687000 audit[8276]: NETFILTER_CFG table=raw:151 family=2 entries=1 op=nft_register_rule pid=8276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:42.687000 audit[8276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc2174e80 a2=0 a3=0 items=0 ppid=2935 pid=8276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:42.687000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:42.689355 systemd-networkd[2176]: veth7a9a410: Link UP Jun 12 23:03:42.709795 kernel: eth0: renamed from veth42675b7 Jun 12 23:03:42.709875 kernel: docker0: port 1(veth7a9a410) entered blocking state Jun 12 23:03:42.709902 kernel: docker0: port 1(veth7a9a410) entered forwarding state Jun 12 23:03:42.712962 systemd-networkd[2176]: veth7a9a410: Gained carrier Jun 12 23:03:42.713406 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:42.765383 sshd[8199]: Connection closed by invalid user gceuser 43.160.253.60 port 55964 [preauth] Jun 12 23:03:42.765000 audit[8199]: AUDIT1109 pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:42.767598 systemd[1]: sshd@66-44-10.0.0.35:22-43.160.253.60:55964.service: Deactivated successfully. Jun 12 23:03:42.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@66-44-10.0.0.35:22-43.160.253.60:55964 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:42.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-4120-10.0.0.35:22-43.160.253.60:55970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:42.939047 systemd[1]: Started sshd@67-4120-10.0.0.35:22-43.160.253.60:55970.service - OpenSSH per-connection server daemon (43.160.253.60:55970). Jun 12 23:03:43.452878 sshd[8287]: Invalid user deploy from 43.160.253.60 port 55970 Jun 12 23:03:43.614715 sshd[8287]: Connection closed by invalid user deploy 43.160.253.60 port 55970 [preauth] Jun 12 23:03:43.614000 audit[8287]: AUDIT1109 pid=8287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:43.616697 systemd[1]: sshd@67-4120-10.0.0.35:22-43.160.253.60:55970.service: Deactivated successfully. Jun 12 23:03:43.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@67-4120-10.0.0.35:22-43.160.253.60:55970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:43.741121 systemd[1]: docker-3420604fb1f414ed1d2651ffa96ed8dc78b2358d3b700fbad6055009e2355e56.scope: Deactivated successfully. Jun 12 23:03:43.752741 containerd[2455]: time="2026-06-12T23:03:43.752711839Z" level=info msg="shim disconnected" id=3420604fb1f414ed1d2651ffa96ed8dc78b2358d3b700fbad6055009e2355e56 namespace=moby Jun 12 23:03:43.753036 dockerd[2935]: time="2026-06-12T23:03:43.752860984Z" level=info msg="ignoring event" container=3420604fb1f414ed1d2651ffa96ed8dc78b2358d3b700fbad6055009e2355e56 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:43.753341 containerd[2455]: time="2026-06-12T23:03:43.753291986Z" level=info msg="cleaning up after shim disconnected" id=3420604fb1f414ed1d2651ffa96ed8dc78b2358d3b700fbad6055009e2355e56 namespace=moby Jun 12 23:03:43.753341 containerd[2455]: time="2026-06-12T23:03:43.753329672Z" level=info msg="cleaning up dead shim" id=3420604fb1f414ed1d2651ffa96ed8dc78b2358d3b700fbad6055009e2355e56 namespace=moby Jun 12 23:03:43.775675 systemd-networkd[2176]: veth7a9a410: Lost carrier Jun 12 23:03:43.775977 kernel: docker0: port 1(veth7a9a410) entered disabled state Jun 12 23:03:43.779796 kernel: veth42675b7: renamed from eth0 Jun 12 23:03:43.791893 systemd[1]: Started sshd@68-45-10.0.0.35:22-43.160.253.60:55974.service - OpenSSH per-connection server daemon (43.160.253.60:55974). Jun 12 23:03:43.791000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-45-10.0.0.35:22-43.160.253.60:55974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:43.794000 audit[8316]: NETFILTER_CFG table=raw:152 family=2 entries=1 op=nft_unregister_rule pid=8316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:43.794000 audit[8316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcd0a9550 a2=0 a3=0 items=0 ppid=2935 pid=8316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:43.794000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:43.798497 systemd-networkd[2176]: veth7a9a410: Link DOWN Jun 12 23:03:43.802793 kernel: docker0: port 1(veth7a9a410) entered disabled state Jun 12 23:03:43.810959 kernel: veth7a9a410 (unregistering): left allmulticast mode Jun 12 23:03:43.811022 kernel: veth7a9a410 (unregistering): left promiscuous mode Jun 12 23:03:43.797000 audit: ANOM_PROMISCUOUS dev=veth7a9a410 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:43.816045 kernel: docker0: port 1(veth7a9a410) entered disabled state Jun 12 23:03:43.797000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3937c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:43.797000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:43.826615 systemd[1]: run-docker-netns-80ab26a8b6a2.mount: Deactivated successfully. Jun 12 23:03:43.831574 systemd[1]: var-lib-docker-overlay2-1d8e8235c548fdf9f973a440ab49ee331fb617aeec0763e77d5a862a95add904-merged.mount: Deactivated successfully. Jun 12 23:03:43.841000 audit: BPF prog-id=329 op=UNLOAD Jun 12 23:03:43.841000 audit: BPF prog-id=333 op=UNLOAD Jun 12 23:03:43.943191 systemd[1]: var-lib-docker-overlay2-f61d8f774d083efb1118aaedf3b6b6f3e01846ecf504e697a5810833ed2ec082\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:44.010259 containerd[2455]: time="2026-06-12T23:03:44.010156810Z" level=info msg="connecting to shim 1664f823506199cfdc246ef72362978b9558c84afe392d1c2d30d06dd4dbea36" address="unix:///run/containerd/s/88a39b6c98104f2810c7756ba104b587ed90fe32d30be0aee6069128b5dee921" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:44.028039 systemd[1]: Started docker-1664f823506199cfdc246ef72362978b9558c84afe392d1c2d30d06dd4dbea36.scope - libcontainer container 1664f823506199cfdc246ef72362978b9558c84afe392d1c2d30d06dd4dbea36. Jun 12 23:03:44.034000 audit: BPF prog-id=334 op=LOAD Jun 12 23:03:44.035000 audit: BPF prog-id=335 op=LOAD Jun 12 23:03:44.035000 audit[8347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=ee690795f80 a2=98 a3=0 items=0 ppid=8336 pid=8347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:44.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363634663832333530363139396366646332343665663732 Jun 12 23:03:44.035000 audit: BPF prog-id=335 op=UNLOAD Jun 12 23:03:44.035000 audit[8347]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8336 pid=8347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:44.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363634663832333530363139396366646332343665663732 Jun 12 23:03:44.035000 audit: BPF prog-id=336 op=LOAD Jun 12 23:03:44.035000 audit[8347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=ee690796258 a2=98 a3=0 items=0 ppid=8336 pid=8347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:44.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363634663832333530363139396366646332343665663732 Jun 12 23:03:44.035000 audit: BPF prog-id=337 op=LOAD Jun 12 23:03:44.035000 audit[8347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=ee690795f98 a2=98 a3=0 items=0 ppid=8336 pid=8347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:44.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363634663832333530363139396366646332343665663732 Jun 12 23:03:44.035000 audit: BPF prog-id=337 op=UNLOAD Jun 12 23:03:44.035000 audit[8347]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8336 pid=8347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:44.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363634663832333530363139396366646332343665663732 Jun 12 23:03:44.035000 audit: BPF prog-id=336 op=UNLOAD Jun 12 23:03:44.035000 audit[8347]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8336 pid=8347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:44.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363634663832333530363139396366646332343665663732 Jun 12 23:03:44.036000 audit: BPF prog-id=338 op=LOAD Jun 12 23:03:44.036000 audit[8347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=ee6907964a8 a2=98 a3=0 items=0 ppid=8336 pid=8347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:44.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363634663832333530363139396366646332343665663732 Jun 12 23:03:44.055232 kernel: docker0: port 1(vethc3751a8) entered blocking state Jun 12 23:03:44.055318 kernel: docker0: port 1(vethc3751a8) entered disabled state Jun 12 23:03:44.058418 kernel: vethc3751a8: entered allmulticast mode Jun 12 23:03:44.061372 kernel: vethc3751a8: entered promiscuous mode Jun 12 23:03:44.046000 audit: ANOM_PROMISCUOUS dev=vethc3751a8 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:44.046000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beab710 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:44.046000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:44.062894 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:44.065000 audit[8369]: NETFILTER_CFG table=raw:153 family=2 entries=1 op=nft_register_rule pid=8369 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:44.065000 audit[8369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc91f7d10 a2=0 a3=0 items=0 ppid=2935 pid=8369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:44.065000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:44.069446 systemd-networkd[2176]: vethc3751a8: Link UP Jun 12 23:03:44.085808 kernel: eth0: renamed from veth4789192 Jun 12 23:03:44.093479 kernel: docker0: port 1(vethc3751a8) entered blocking state Jun 12 23:03:44.093549 kernel: docker0: port 1(vethc3751a8) entered forwarding state Jun 12 23:03:44.093862 systemd-networkd[2176]: vethc3751a8: Gained carrier Jun 12 23:03:44.094356 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:44.316714 sshd[8314]: Invalid user deploy from 43.160.253.60 port 55974 Jun 12 23:03:44.478486 sshd[8314]: Connection closed by invalid user deploy 43.160.253.60 port 55974 [preauth] Jun 12 23:03:44.478000 audit[8314]: AUDIT1109 pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:44.487989 kernel: kauditd_printk_skb: 152 callbacks suppressed Jun 12 23:03:44.488034 kernel: audit: type=1109 audit(1781305424.478:1331): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:44.494589 systemd[1]: sshd@68-45-10.0.0.35:22-43.160.253.60:55974.service: Deactivated successfully. Jun 12 23:03:44.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-45-10.0.0.35:22-43.160.253.60:55974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:44.512600 kernel: audit: type=1131 audit(1781305424.492:1332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@68-45-10.0.0.35:22-43.160.253.60:55974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:44.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-4121-10.0.0.35:22-43.160.253.60:55988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:44.650046 systemd[1]: Started sshd@69-4121-10.0.0.35:22-43.160.253.60:55988.service - OpenSSH per-connection server daemon (43.160.253.60:55988). Jun 12 23:03:44.665828 kernel: audit: type=1130 audit(1781305424.649:1333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-4121-10.0.0.35:22-43.160.253.60:55988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:45.118734 systemd[1]: docker-1664f823506199cfdc246ef72362978b9558c84afe392d1c2d30d06dd4dbea36.scope: Deactivated successfully. Jun 12 23:03:45.130267 dockerd[2935]: time="2026-06-12T23:03:45.130181325Z" level=info msg="ignoring event" container=1664f823506199cfdc246ef72362978b9558c84afe392d1c2d30d06dd4dbea36 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:45.131246 containerd[2455]: time="2026-06-12T23:03:45.131202202Z" level=info msg="shim disconnected" id=1664f823506199cfdc246ef72362978b9558c84afe392d1c2d30d06dd4dbea36 namespace=moby Jun 12 23:03:45.131698 containerd[2455]: time="2026-06-12T23:03:45.131231777Z" level=info msg="cleaning up after shim disconnected" id=1664f823506199cfdc246ef72362978b9558c84afe392d1c2d30d06dd4dbea36 namespace=moby Jun 12 23:03:45.131698 containerd[2455]: time="2026-06-12T23:03:45.131521954Z" level=info msg="cleaning up dead shim" id=1664f823506199cfdc246ef72362978b9558c84afe392d1c2d30d06dd4dbea36 namespace=moby Jun 12 23:03:45.162806 kernel: docker0: port 1(vethc3751a8) entered disabled state Jun 12 23:03:45.162914 kernel: veth4789192: renamed from eth0 Jun 12 23:03:45.163868 systemd-networkd[2176]: vethc3751a8: Lost carrier Jun 12 23:03:45.177143 sshd[8381]: Invalid user jenkins from 43.160.253.60 port 55988 Jun 12 23:03:45.180000 audit[8406]: NETFILTER_CFG table=raw:154 family=2 entries=1 op=nft_unregister_rule pid=8406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:45.180000 audit[8406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffca71d50 a2=0 a3=0 items=0 ppid=2935 pid=8406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.209084 kernel: audit: type=1325 audit(1781305425.180:1334): table=raw:154 family=2 entries=1 op=nft_unregister_rule pid=8406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:45.209159 kernel: audit: type=1300 audit(1781305425.180:1334): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffca71d50 a2=0 a3=0 items=0 ppid=2935 pid=8406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.180000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:45.221280 kernel: audit: type=1327 audit(1781305425.180:1334): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:45.221705 systemd-networkd[2176]: vethc3751a8: Link DOWN Jun 12 23:03:45.225845 kernel: docker0: port 1(vethc3751a8) entered disabled state Jun 12 23:03:45.234639 kernel: vethc3751a8 (unregistering): left allmulticast mode Jun 12 23:03:45.234710 kernel: vethc3751a8 (unregistering): left promiscuous mode Jun 12 23:03:45.220000 audit: ANOM_PROMISCUOUS dev=vethc3751a8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:45.238846 kernel: docker0: port 1(vethc3751a8) entered disabled state Jun 12 23:03:45.238880 kernel: audit: type=1700 audit(1781305425.220:1335): dev=vethc3751a8 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:45.220000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8dab40 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.220000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:45.283979 kernel: audit: type=1300 audit(1781305425.220:1335): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8dab40 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.284076 kernel: audit: type=1327 audit(1781305425.220:1335): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:45.286038 systemd[1]: run-docker-netns-df1a0dc612ca.mount: Deactivated successfully. Jun 12 23:03:45.290394 systemd[1]: var-lib-docker-overlay2-f61d8f774d083efb1118aaedf3b6b6f3e01846ecf504e697a5810833ed2ec082-merged.mount: Deactivated successfully. Jun 12 23:03:45.300000 audit: BPF prog-id=334 op=UNLOAD Jun 12 23:03:45.300000 audit: BPF prog-id=338 op=UNLOAD Jun 12 23:03:45.305795 kernel: audit: type=1334 audit(1781305425.300:1336): prog-id=334 op=UNLOAD Jun 12 23:03:45.338567 sshd[8381]: Connection closed by invalid user jenkins 43.160.253.60 port 55988 [preauth] Jun 12 23:03:45.338000 audit[8381]: AUDIT1109 pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:45.340689 systemd[1]: sshd@69-4121-10.0.0.35:22-43.160.253.60:55988.service: Deactivated successfully. Jun 12 23:03:45.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@69-4121-10.0.0.35:22-43.160.253.60:55988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:45.395139 systemd[1]: var-lib-docker-overlay2-58550d7836192185a1b1ead20cdf1ad13abfd6007aaa9359080d8919fcac53df\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:45.462803 containerd[2455]: time="2026-06-12T23:03:45.462407056Z" level=info msg="connecting to shim ae559729229c03e32f017acb0cdb112f2cf09bd9c20fef35a41b4e1cef582100" address="unix:///run/containerd/s/85d8ce7a698e1f2a90e6b1422d050c4aeeb165e4ed260904b16dc4f68f704215" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:45.484948 systemd[1]: Started docker-ae559729229c03e32f017acb0cdb112f2cf09bd9c20fef35a41b4e1cef582100.scope - libcontainer container ae559729229c03e32f017acb0cdb112f2cf09bd9c20fef35a41b4e1cef582100. Jun 12 23:03:45.492000 audit: BPF prog-id=339 op=LOAD Jun 12 23:03:45.492000 audit: BPF prog-id=340 op=LOAD Jun 12 23:03:45.492000 audit[8437]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1be7132e7f80 a2=98 a3=0 items=0 ppid=8426 pid=8437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61653535393732393232396330336533326630313761636230 Jun 12 23:03:45.492000 audit: BPF prog-id=340 op=UNLOAD Jun 12 23:03:45.492000 audit[8437]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8426 pid=8437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61653535393732393232396330336533326630313761636230 Jun 12 23:03:45.493000 audit: BPF prog-id=341 op=LOAD Jun 12 23:03:45.493000 audit[8437]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1be7132e8258 a2=98 a3=0 items=0 ppid=8426 pid=8437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61653535393732393232396330336533326630313761636230 Jun 12 23:03:45.493000 audit: BPF prog-id=342 op=LOAD Jun 12 23:03:45.493000 audit[8437]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=1be7132e7f98 a2=98 a3=0 items=0 ppid=8426 pid=8437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61653535393732393232396330336533326630313761636230 Jun 12 23:03:45.493000 audit: BPF prog-id=342 op=UNLOAD Jun 12 23:03:45.493000 audit[8437]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=8426 pid=8437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61653535393732393232396330336533326630313761636230 Jun 12 23:03:45.493000 audit: BPF prog-id=341 op=UNLOAD Jun 12 23:03:45.493000 audit[8437]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=8426 pid=8437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61653535393732393232396330336533326630313761636230 Jun 12 23:03:45.493000 audit: BPF prog-id=343 op=LOAD Jun 12 23:03:45.493000 audit[8437]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1be7132e84a8 a2=98 a3=0 items=0 ppid=8426 pid=8437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61653535393732393232396330336533326630313761636230 Jun 12 23:03:45.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-4122-10.0.0.35:22-43.160.253.60:55992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:45.511386 systemd[1]: Started sshd@70-4122-10.0.0.35:22-43.160.253.60:55992.service - OpenSSH per-connection server daemon (43.160.253.60:55992). Jun 12 23:03:45.513123 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:45.521188 kernel: docker0: port 1(veth2cbe85b) entered blocking state Jun 12 23:03:45.521252 kernel: docker0: port 1(veth2cbe85b) entered disabled state Jun 12 23:03:45.525122 kernel: veth2cbe85b: entered allmulticast mode Jun 12 23:03:45.528879 kernel: veth2cbe85b: entered promiscuous mode Jun 12 23:03:45.512000 audit: ANOM_PROMISCUOUS dev=veth2cbe85b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:45.512000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f91d0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.512000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:45.531000 audit[8460]: NETFILTER_CFG table=raw:155 family=2 entries=1 op=nft_register_rule pid=8460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:45.531000 audit[8460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcfa54970 a2=0 a3=0 items=0 ppid=2935 pid=8460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:45.531000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:45.533390 systemd-networkd[2176]: veth2cbe85b: Link UP Jun 12 23:03:45.550214 kernel: eth0: renamed from vethdc1b534 Jun 12 23:03:45.550313 kernel: docker0: port 1(veth2cbe85b) entered blocking state Jun 12 23:03:45.553699 kernel: docker0: port 1(veth2cbe85b) entered forwarding state Jun 12 23:03:45.554095 systemd-networkd[2176]: veth2cbe85b: Gained carrier Jun 12 23:03:45.555039 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:46.041563 sshd[8457]: Invalid user minecraft from 43.160.253.60 port 55992 Jun 12 23:03:46.205636 sshd[8457]: Connection closed by invalid user minecraft 43.160.253.60 port 55992 [preauth] Jun 12 23:03:46.205000 audit[8457]: AUDIT1109 pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:46.207670 systemd[1]: sshd@70-4122-10.0.0.35:22-43.160.253.60:55992.service: Deactivated successfully. Jun 12 23:03:46.207000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@70-4122-10.0.0.35:22-43.160.253.60:55992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:46.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-46-10.0.0.35:22-43.160.253.60:58556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:46.378016 systemd[1]: Started sshd@71-46-10.0.0.35:22-43.160.253.60:58556.service - OpenSSH per-connection server daemon (43.160.253.60:58556). Jun 12 23:03:46.578254 systemd[1]: docker-ae559729229c03e32f017acb0cdb112f2cf09bd9c20fef35a41b4e1cef582100.scope: Deactivated successfully. Jun 12 23:03:46.591219 dockerd[2935]: time="2026-06-12T23:03:46.591178296Z" level=info msg="ignoring event" container=ae559729229c03e32f017acb0cdb112f2cf09bd9c20fef35a41b4e1cef582100 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:46.591969 containerd[2455]: time="2026-06-12T23:03:46.591763236Z" level=info msg="shim disconnected" id=ae559729229c03e32f017acb0cdb112f2cf09bd9c20fef35a41b4e1cef582100 namespace=moby Jun 12 23:03:46.591969 containerd[2455]: time="2026-06-12T23:03:46.591860488Z" level=info msg="cleaning up after shim disconnected" id=ae559729229c03e32f017acb0cdb112f2cf09bd9c20fef35a41b4e1cef582100 namespace=moby Jun 12 23:03:46.591969 containerd[2455]: time="2026-06-12T23:03:46.591886751Z" level=info msg="cleaning up dead shim" id=ae559729229c03e32f017acb0cdb112f2cf09bd9c20fef35a41b4e1cef582100 namespace=moby Jun 12 23:03:46.613069 systemd-networkd[2176]: veth2cbe85b: Lost carrier Jun 12 23:03:46.613797 kernel: docker0: port 1(veth2cbe85b) entered disabled state Jun 12 23:03:46.613863 kernel: vethdc1b534: renamed from eth0 Jun 12 23:03:46.630000 audit[8499]: NETFILTER_CFG table=raw:156 family=2 entries=1 op=nft_unregister_rule pid=8499 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:46.630000 audit[8499]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc7fd7570 a2=0 a3=0 items=0 ppid=2935 pid=8499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.630000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:46.638254 systemd-networkd[2176]: veth2cbe85b: Link DOWN Jun 12 23:03:46.646537 kernel: docker0: port 1(veth2cbe85b) entered disabled state Jun 12 23:03:46.646605 kernel: veth2cbe85b (unregistering): left allmulticast mode Jun 12 23:03:46.650558 kernel: veth2cbe85b (unregistering): left promiscuous mode Jun 12 23:03:46.654825 kernel: docker0: port 1(veth2cbe85b) entered disabled state Jun 12 23:03:46.637000 audit: ANOM_PROMISCUOUS dev=veth2cbe85b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:46.637000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb30ee0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.637000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:46.662589 systemd[1]: run-docker-netns-1e2d9d4c1f1b.mount: Deactivated successfully. Jun 12 23:03:46.665536 systemd[1]: var-lib-docker-overlay2-58550d7836192185a1b1ead20cdf1ad13abfd6007aaa9359080d8919fcac53df-merged.mount: Deactivated successfully. Jun 12 23:03:46.676000 audit: BPF prog-id=339 op=UNLOAD Jun 12 23:03:46.676000 audit: BPF prog-id=343 op=UNLOAD Jun 12 23:03:46.738365 systemd[1]: var-lib-docker-overlay2-af6d96321e1f05fb295ab49400109fc948ba3c1b2777e542994acfa3fb6e8baa\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:46.809288 containerd[2455]: time="2026-06-12T23:03:46.809096303Z" level=info msg="connecting to shim 400cb9ca04cd895da77c988708b6049a40bc76291b69ba806d2f5fba01f1a324" address="unix:///run/containerd/s/289b8c7b51faf6aabd78e7ba753a62af315cba4eff67c8501c870c1ccfa8c77c" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:46.827152 systemd[1]: Started docker-400cb9ca04cd895da77c988708b6049a40bc76291b69ba806d2f5fba01f1a324.scope - libcontainer container 400cb9ca04cd895da77c988708b6049a40bc76291b69ba806d2f5fba01f1a324. Jun 12 23:03:46.834000 audit: BPF prog-id=344 op=LOAD Jun 12 23:03:46.834000 audit: BPF prog-id=345 op=LOAD Jun 12 23:03:46.834000 audit[8527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1cdc24e37f80 a2=98 a3=0 items=0 ppid=8516 pid=8527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34303063623963613034636438393564613737633938383730 Jun 12 23:03:46.835000 audit: BPF prog-id=345 op=UNLOAD Jun 12 23:03:46.835000 audit[8527]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8516 pid=8527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34303063623963613034636438393564613737633938383730 Jun 12 23:03:46.835000 audit: BPF prog-id=346 op=LOAD Jun 12 23:03:46.835000 audit[8527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1cdc24e38258 a2=98 a3=0 items=0 ppid=8516 pid=8527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34303063623963613034636438393564613737633938383730 Jun 12 23:03:46.835000 audit: BPF prog-id=347 op=LOAD Jun 12 23:03:46.835000 audit[8527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1cdc24e37f98 a2=98 a3=0 items=0 ppid=8516 pid=8527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34303063623963613034636438393564613737633938383730 Jun 12 23:03:46.835000 audit: BPF prog-id=347 op=UNLOAD Jun 12 23:03:46.835000 audit[8527]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8516 pid=8527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34303063623963613034636438393564613737633938383730 Jun 12 23:03:46.835000 audit: BPF prog-id=346 op=UNLOAD Jun 12 23:03:46.835000 audit[8527]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8516 pid=8527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34303063623963613034636438393564613737633938383730 Jun 12 23:03:46.835000 audit: BPF prog-id=348 op=LOAD Jun 12 23:03:46.835000 audit[8527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1cdc24e384a8 a2=98 a3=0 items=0 ppid=8516 pid=8527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34303063623963613034636438393564613737633938383730 Jun 12 23:03:46.853700 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:46.859315 kernel: docker0: port 1(vethbd64150) entered blocking state Jun 12 23:03:46.859397 kernel: docker0: port 1(vethbd64150) entered disabled state Jun 12 23:03:46.862676 kernel: vethbd64150: entered allmulticast mode Jun 12 23:03:46.865677 kernel: vethbd64150: entered promiscuous mode Jun 12 23:03:46.848000 audit: ANOM_PROMISCUOUS dev=vethbd64150 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:46.848000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b241c20 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.848000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:46.867000 audit[8548]: NETFILTER_CFG table=raw:157 family=2 entries=1 op=nft_register_rule pid=8548 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:46.867000 audit[8548]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe2537bb0 a2=0 a3=0 items=0 ppid=2935 pid=8548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:46.867000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:46.868561 systemd-networkd[2176]: vethbd64150: Link UP Jun 12 23:03:46.890452 kernel: eth0: renamed from vethc791424 Jun 12 23:03:46.890524 kernel: docker0: port 1(vethbd64150) entered blocking state Jun 12 23:03:46.894331 kernel: docker0: port 1(vethbd64150) entered forwarding state Jun 12 23:03:46.894715 systemd-networkd[2176]: vethbd64150: Gained carrier Jun 12 23:03:46.895854 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:46.897499 sshd[8473]: Invalid user daniel from 43.160.253.60 port 58556 Jun 12 23:03:47.060542 sshd[8473]: Connection closed by invalid user daniel 43.160.253.60 port 58556 [preauth] Jun 12 23:03:47.059000 audit[8473]: AUDIT1109 pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:47.062160 systemd[1]: sshd@71-46-10.0.0.35:22-43.160.253.60:58556.service: Deactivated successfully. Jun 12 23:03:47.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@71-46-10.0.0.35:22-43.160.253.60:58556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:47.233843 systemd[1]: Started sshd@72-4123-10.0.0.35:22-43.160.253.60:58568.service - OpenSSH per-connection server daemon (43.160.253.60:58568). Jun 12 23:03:47.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-4123-10.0.0.35:22-43.160.253.60:58568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:47.747699 sshd[8560]: Invalid user appuser from 43.160.253.60 port 58568 Jun 12 23:03:47.909160 sshd[8560]: Connection closed by invalid user appuser 43.160.253.60 port 58568 [preauth] Jun 12 23:03:47.908000 audit[8560]: AUDIT1109 pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:47.911037 systemd[1]: sshd@72-4123-10.0.0.35:22-43.160.253.60:58568.service: Deactivated successfully. Jun 12 23:03:47.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@72-4123-10.0.0.35:22-43.160.253.60:58568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:47.921842 systemd[1]: docker-400cb9ca04cd895da77c988708b6049a40bc76291b69ba806d2f5fba01f1a324.scope: Deactivated successfully. Jun 12 23:03:47.936537 dockerd[2935]: time="2026-06-12T23:03:47.936480227Z" level=info msg="ignoring event" container=400cb9ca04cd895da77c988708b6049a40bc76291b69ba806d2f5fba01f1a324 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:47.936895 containerd[2455]: time="2026-06-12T23:03:47.936671970Z" level=info msg="shim disconnected" id=400cb9ca04cd895da77c988708b6049a40bc76291b69ba806d2f5fba01f1a324 namespace=moby Jun 12 23:03:47.936895 containerd[2455]: time="2026-06-12T23:03:47.936696417Z" level=info msg="cleaning up after shim disconnected" id=400cb9ca04cd895da77c988708b6049a40bc76291b69ba806d2f5fba01f1a324 namespace=moby Jun 12 23:03:47.936895 containerd[2455]: time="2026-06-12T23:03:47.936702065Z" level=info msg="cleaning up dead shim" id=400cb9ca04cd895da77c988708b6049a40bc76291b69ba806d2f5fba01f1a324 namespace=moby Jun 12 23:03:47.938986 systemd-networkd[2176]: vethbd64150: Gained IPv6LL Jun 12 23:03:47.959037 systemd-networkd[2176]: vethbd64150: Lost carrier Jun 12 23:03:47.959802 kernel: docker0: port 1(vethbd64150) entered disabled state Jun 12 23:03:47.959869 kernel: vethc791424: renamed from eth0 Jun 12 23:03:47.973000 audit[8588]: NETFILTER_CFG table=raw:158 family=2 entries=1 op=nft_unregister_rule pid=8588 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:47.973000 audit[8588]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffed03d420 a2=0 a3=0 items=0 ppid=2935 pid=8588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:47.973000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:47.980243 systemd-networkd[2176]: vethbd64150: Link DOWN Jun 12 23:03:47.983858 kernel: docker0: port 1(vethbd64150) entered disabled state Jun 12 23:03:47.991908 kernel: vethbd64150 (unregistering): left allmulticast mode Jun 12 23:03:47.991968 kernel: vethbd64150 (unregistering): left promiscuous mode Jun 12 23:03:47.979000 audit: ANOM_PROMISCUOUS dev=vethbd64150 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:47.996196 kernel: docker0: port 1(vethbd64150) entered disabled state Jun 12 23:03:47.979000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bafb2e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:47.979000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:48.009685 systemd[1]: run-docker-netns-6f827da24171.mount: Deactivated successfully. Jun 12 23:03:48.017121 systemd[1]: var-lib-docker-overlay2-af6d96321e1f05fb295ab49400109fc948ba3c1b2777e542994acfa3fb6e8baa-merged.mount: Deactivated successfully. Jun 12 23:03:48.021000 audit: BPF prog-id=344 op=UNLOAD Jun 12 23:03:48.021000 audit: BPF prog-id=348 op=UNLOAD Jun 12 23:03:48.080469 systemd[1]: Started sshd@73-4124-10.0.0.35:22-43.160.253.60:58580.service - OpenSSH per-connection server daemon (43.160.253.60:58580). Jun 12 23:03:48.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-4124-10.0.0.35:22-43.160.253.60:58580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:48.093387 systemd[1]: var-lib-docker-overlay2-411c67562f421d00125702e1e34bf495ec75b92d02faac70f5ff2b5aecce0bdd\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:48.160136 containerd[2455]: time="2026-06-12T23:03:48.160093538Z" level=info msg="connecting to shim e605ccc783f678a25b91380ece34668cb09dd0a17687302c7234a86368baefbd" address="unix:///run/containerd/s/a9c197291d9d6bf6f9309067709df37d0f83e170fbca8e848ccd33c38e7a1f0b" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:48.178146 systemd[1]: Started docker-e605ccc783f678a25b91380ece34668cb09dd0a17687302c7234a86368baefbd.scope - libcontainer container e605ccc783f678a25b91380ece34668cb09dd0a17687302c7234a86368baefbd. Jun 12 23:03:48.186000 audit: BPF prog-id=349 op=LOAD Jun 12 23:03:48.186000 audit: BPF prog-id=350 op=LOAD Jun 12 23:03:48.186000 audit[8621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=28ff03a69f80 a2=98 a3=0 items=0 ppid=8609 pid=8621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:48.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65363035636363373833663637386132356239313338306563 Jun 12 23:03:48.186000 audit: BPF prog-id=350 op=UNLOAD Jun 12 23:03:48.186000 audit[8621]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8609 pid=8621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:48.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65363035636363373833663637386132356239313338306563 Jun 12 23:03:48.186000 audit: BPF prog-id=351 op=LOAD Jun 12 23:03:48.186000 audit[8621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=28ff03a6a258 a2=98 a3=0 items=0 ppid=8609 pid=8621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:48.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65363035636363373833663637386132356239313338306563 Jun 12 23:03:48.186000 audit: BPF prog-id=352 op=LOAD Jun 12 23:03:48.186000 audit[8621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=28ff03a69f98 a2=98 a3=0 items=0 ppid=8609 pid=8621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:48.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65363035636363373833663637386132356239313338306563 Jun 12 23:03:48.186000 audit: BPF prog-id=352 op=UNLOAD Jun 12 23:03:48.186000 audit[8621]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8609 pid=8621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:48.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65363035636363373833663637386132356239313338306563 Jun 12 23:03:48.186000 audit: BPF prog-id=351 op=UNLOAD Jun 12 23:03:48.186000 audit[8621]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8609 pid=8621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:48.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65363035636363373833663637386132356239313338306563 Jun 12 23:03:48.186000 audit: BPF prog-id=353 op=LOAD Jun 12 23:03:48.186000 audit[8621]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=28ff03a6a4a8 a2=98 a3=0 items=0 ppid=8609 pid=8621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:48.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65363035636363373833663637386132356239313338306563 Jun 12 23:03:48.202763 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:48.207501 kernel: docker0: port 1(veth564ff2b) entered blocking state Jun 12 23:03:48.207574 kernel: docker0: port 1(veth564ff2b) entered disabled state Jun 12 23:03:48.211251 kernel: veth564ff2b: entered allmulticast mode Jun 12 23:03:48.214706 kernel: veth564ff2b: entered promiscuous mode Jun 12 23:03:48.198000 audit: ANOM_PROMISCUOUS dev=veth564ff2b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:48.198000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760bc31980 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:48.198000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:48.216000 audit[8644]: NETFILTER_CFG table=raw:159 family=2 entries=1 op=nft_register_rule pid=8644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:48.216000 audit[8644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff5a516b0 a2=0 a3=0 items=0 ppid=2935 pid=8644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:48.216000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:48.218981 systemd-networkd[2176]: veth564ff2b: Link UP Jun 12 23:03:48.236830 kernel: eth0: renamed from veth889d05d Jun 12 23:03:48.236904 kernel: docker0: port 1(veth564ff2b) entered blocking state Jun 12 23:03:48.240821 kernel: docker0: port 1(veth564ff2b) entered forwarding state Jun 12 23:03:48.241143 systemd-networkd[2176]: veth564ff2b: Gained carrier Jun 12 23:03:48.241422 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:48.594628 sshd[8597]: Invalid user esuser from 43.160.253.60 port 58580 Jun 12 23:03:48.757893 sshd[8597]: Connection closed by invalid user esuser 43.160.253.60 port 58580 [preauth] Jun 12 23:03:48.757000 audit[8597]: AUDIT1109 pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:48.759816 systemd[1]: sshd@73-4124-10.0.0.35:22-43.160.253.60:58580.service: Deactivated successfully. Jun 12 23:03:48.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@73-4124-10.0.0.35:22-43.160.253.60:58580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:48.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-4125-10.0.0.35:22-43.160.253.60:58582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:48.930364 systemd[1]: Started sshd@74-4125-10.0.0.35:22-43.160.253.60:58582.service - OpenSSH per-connection server daemon (43.160.253.60:58582). Jun 12 23:03:49.264539 systemd[1]: docker-e605ccc783f678a25b91380ece34668cb09dd0a17687302c7234a86368baefbd.scope: Deactivated successfully. Jun 12 23:03:49.275911 containerd[2455]: time="2026-06-12T23:03:49.275841817Z" level=info msg="shim disconnected" id=e605ccc783f678a25b91380ece34668cb09dd0a17687302c7234a86368baefbd namespace=moby Jun 12 23:03:49.275911 containerd[2455]: time="2026-06-12T23:03:49.275882887Z" level=info msg="cleaning up after shim disconnected" id=e605ccc783f678a25b91380ece34668cb09dd0a17687302c7234a86368baefbd namespace=moby Jun 12 23:03:49.275911 containerd[2455]: time="2026-06-12T23:03:49.275892678Z" level=info msg="cleaning up dead shim" id=e605ccc783f678a25b91380ece34668cb09dd0a17687302c7234a86368baefbd namespace=moby Jun 12 23:03:49.276243 dockerd[2935]: time="2026-06-12T23:03:49.275877551Z" level=info msg="ignoring event" container=e605ccc783f678a25b91380ece34668cb09dd0a17687302c7234a86368baefbd module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:49.297805 kernel: docker0: port 1(veth564ff2b) entered disabled state Jun 12 23:03:49.297890 kernel: veth889d05d: renamed from eth0 Jun 12 23:03:49.297928 systemd-networkd[2176]: veth564ff2b: Lost carrier Jun 12 23:03:49.312000 audit[8679]: NETFILTER_CFG table=raw:160 family=2 entries=1 op=nft_unregister_rule pid=8679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:49.312000 audit[8679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc679abc0 a2=0 a3=0 items=0 ppid=2935 pid=8679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.312000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:49.322229 systemd-networkd[2176]: veth564ff2b: Link DOWN Jun 12 23:03:49.331139 kernel: docker0: port 1(veth564ff2b) entered disabled state Jun 12 23:03:49.331201 kernel: veth564ff2b (unregistering): left allmulticast mode Jun 12 23:03:49.335213 kernel: veth564ff2b (unregistering): left promiscuous mode Jun 12 23:03:49.321000 audit: ANOM_PROMISCUOUS dev=veth564ff2b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:49.339046 kernel: docker0: port 1(veth564ff2b) entered disabled state Jun 12 23:03:49.321000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bd8a840 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.321000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:49.355288 systemd[1]: run-docker-netns-4d619265f5d4.mount: Deactivated successfully. Jun 12 23:03:49.358920 systemd[1]: var-lib-docker-overlay2-411c67562f421d00125702e1e34bf495ec75b92d02faac70f5ff2b5aecce0bdd-merged.mount: Deactivated successfully. Jun 12 23:03:49.364000 audit: BPF prog-id=349 op=UNLOAD Jun 12 23:03:49.364000 audit: BPF prog-id=353 op=UNLOAD Jun 12 23:03:49.444213 sshd[8655]: Invalid user odoo18 from 43.160.253.60 port 58582 Jun 12 23:03:49.459983 systemd[1]: var-lib-docker-overlay2-4722ecec54736742f37aaa73f03f7c06d93c2e91b65300676b3b03e12140f0c2\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:49.536383 containerd[2455]: time="2026-06-12T23:03:49.535889585Z" level=info msg="connecting to shim 55f55aabd814e34ab293f3f515cd67087c922d63979d881ff6d4be4031cac747" address="unix:///run/containerd/s/c08e23cc9c943564b43d86f5562c90b263d0ccb2d1170e8f24ade2a911c46a7f" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:49.556932 systemd[1]: Started docker-55f55aabd814e34ab293f3f515cd67087c922d63979d881ff6d4be4031cac747.scope - libcontainer container 55f55aabd814e34ab293f3f515cd67087c922d63979d881ff6d4be4031cac747. Jun 12 23:03:49.564000 audit: BPF prog-id=354 op=LOAD Jun 12 23:03:49.568603 kernel: kauditd_printk_skb: 124 callbacks suppressed Jun 12 23:03:49.568689 kernel: audit: type=1334 audit(1781305429.564:1395): prog-id=354 op=LOAD Jun 12 23:03:49.564000 audit: BPF prog-id=355 op=LOAD Jun 12 23:03:49.576942 kernel: audit: type=1334 audit(1781305429.564:1396): prog-id=355 op=LOAD Jun 12 23:03:49.564000 audit[8707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=333234537f80 a2=98 a3=0 items=0 ppid=8696 pid=8707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.595686 kernel: audit: type=1300 audit(1781305429.564:1396): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=333234537f80 a2=98 a3=0 items=0 ppid=8696 pid=8707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356635356161626438313465333461623239336633663531 Jun 12 23:03:49.613732 kernel: audit: type=1327 audit(1781305429.564:1396): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356635356161626438313465333461623239336633663531 Jun 12 23:03:49.614791 sshd[8655]: Connection closed by invalid user odoo18 43.160.253.60 port 58582 [preauth] Jun 12 23:03:49.568000 audit: BPF prog-id=355 op=UNLOAD Jun 12 23:03:49.618855 kernel: audit: type=1334 audit(1781305429.568:1397): prog-id=355 op=UNLOAD Jun 12 23:03:49.619596 systemd[1]: sshd@74-4125-10.0.0.35:22-43.160.253.60:58582.service: Deactivated successfully. Jun 12 23:03:49.568000 audit[8707]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8696 pid=8707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.637996 kernel: audit: type=1300 audit(1781305429.568:1397): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8696 pid=8707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356635356161626438313465333461623239336633663531 Jun 12 23:03:49.655641 kernel: audit: type=1327 audit(1781305429.568:1397): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356635356161626438313465333461623239336633663531 Jun 12 23:03:49.568000 audit: BPF prog-id=356 op=LOAD Jun 12 23:03:49.660325 kernel: audit: type=1334 audit(1781305429.568:1398): prog-id=356 op=LOAD Jun 12 23:03:49.568000 audit[8707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=333234538258 a2=98 a3=0 items=0 ppid=8696 pid=8707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.678288 kernel: audit: type=1300 audit(1781305429.568:1398): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=333234538258 a2=98 a3=0 items=0 ppid=8696 pid=8707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356635356161626438313465333461623239336633663531 Jun 12 23:03:49.695207 kernel: audit: type=1327 audit(1781305429.568:1398): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356635356161626438313465333461623239336633663531 Jun 12 23:03:49.572000 audit: BPF prog-id=357 op=LOAD Jun 12 23:03:49.572000 audit[8707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=333234537f98 a2=98 a3=0 items=0 ppid=8696 pid=8707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356635356161626438313465333461623239336633663531 Jun 12 23:03:49.576000 audit: BPF prog-id=357 op=UNLOAD Jun 12 23:03:49.576000 audit[8707]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8696 pid=8707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356635356161626438313465333461623239336633663531 Jun 12 23:03:49.576000 audit: BPF prog-id=356 op=UNLOAD Jun 12 23:03:49.576000 audit[8707]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8696 pid=8707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356635356161626438313465333461623239336633663531 Jun 12 23:03:49.576000 audit: BPF prog-id=358 op=LOAD Jun 12 23:03:49.576000 audit[8707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3332345384a8 a2=98 a3=0 items=0 ppid=8696 pid=8707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356635356161626438313465333461623239336633663531 Jun 12 23:03:49.614000 audit[8655]: AUDIT1109 pid=8655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:49.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@74-4125-10.0.0.35:22-43.160.253.60:58582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:49.708181 kernel: docker0: port 1(veth4de9854) entered blocking state Jun 12 23:03:49.708240 kernel: docker0: port 1(veth4de9854) entered disabled state Jun 12 23:03:49.711875 kernel: veth4de9854: entered allmulticast mode Jun 12 23:03:49.716017 kernel: veth4de9854: entered promiscuous mode Jun 12 23:03:49.699000 audit: ANOM_PROMISCUOUS dev=veth4de9854 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:49.699000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0c8a0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.699000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:49.717182 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:49.718000 audit[8730]: NETFILTER_CFG table=raw:161 family=2 entries=1 op=nft_register_rule pid=8730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:49.718000 audit[8730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff0598530 a2=0 a3=0 items=0 ppid=2935 pid=8730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:49.718000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:49.719574 systemd-networkd[2176]: veth4de9854: Link UP Jun 12 23:03:49.736813 kernel: eth0: renamed from veth81a78e8 Jun 12 23:03:49.744632 kernel: docker0: port 1(veth4de9854) entered blocking state Jun 12 23:03:49.744701 kernel: docker0: port 1(veth4de9854) entered forwarding state Jun 12 23:03:49.744731 systemd-networkd[2176]: veth4de9854: Gained carrier Jun 12 23:03:49.745218 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:49.783124 systemd[1]: Started sshd@75-47-10.0.0.35:22-43.160.253.60:58590.service - OpenSSH per-connection server daemon (43.160.253.60:58590). Jun 12 23:03:49.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-47-10.0.0.35:22-43.160.253.60:58590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:50.297507 sshd[8739]: Invalid user cs2 from 43.160.253.60 port 58590 Jun 12 23:03:50.459553 sshd[8739]: Connection closed by invalid user cs2 43.160.253.60 port 58590 [preauth] Jun 12 23:03:50.459000 audit[8739]: AUDIT1109 pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:50.460851 systemd[1]: sshd@75-47-10.0.0.35:22-43.160.253.60:58590.service: Deactivated successfully. Jun 12 23:03:50.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@75-47-10.0.0.35:22-43.160.253.60:58590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:50.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-48-10.0.0.35:22-43.160.253.60:58606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:50.632044 systemd[1]: Started sshd@76-48-10.0.0.35:22-43.160.253.60:58606.service - OpenSSH per-connection server daemon (43.160.253.60:58606). Jun 12 23:03:50.771902 systemd[1]: docker-55f55aabd814e34ab293f3f515cd67087c922d63979d881ff6d4be4031cac747.scope: Deactivated successfully. Jun 12 23:03:50.782674 dockerd[2935]: time="2026-06-12T23:03:50.782638627Z" level=info msg="ignoring event" container=55f55aabd814e34ab293f3f515cd67087c922d63979d881ff6d4be4031cac747 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:50.782979 containerd[2455]: time="2026-06-12T23:03:50.782645618Z" level=info msg="shim disconnected" id=55f55aabd814e34ab293f3f515cd67087c922d63979d881ff6d4be4031cac747 namespace=moby Jun 12 23:03:50.782979 containerd[2455]: time="2026-06-12T23:03:50.782687824Z" level=info msg="cleaning up after shim disconnected" id=55f55aabd814e34ab293f3f515cd67087c922d63979d881ff6d4be4031cac747 namespace=moby Jun 12 23:03:50.782979 containerd[2455]: time="2026-06-12T23:03:50.782695416Z" level=info msg="cleaning up dead shim" id=55f55aabd814e34ab293f3f515cd67087c922d63979d881ff6d4be4031cac747 namespace=moby Jun 12 23:03:50.805072 systemd-networkd[2176]: veth4de9854: Lost carrier Jun 12 23:03:50.805925 kernel: docker0: port 1(veth4de9854) entered disabled state Jun 12 23:03:50.808794 kernel: veth81a78e8: renamed from eth0 Jun 12 23:03:50.825000 audit[8771]: NETFILTER_CFG table=raw:162 family=2 entries=1 op=nft_unregister_rule pid=8771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:50.825000 audit[8771]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd238e200 a2=0 a3=0 items=0 ppid=2935 pid=8771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:50.825000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:50.833255 systemd-networkd[2176]: veth4de9854: Link DOWN Jun 12 23:03:50.842105 kernel: docker0: port 1(veth4de9854) entered disabled state Jun 12 23:03:50.842173 kernel: veth4de9854 (unregistering): left allmulticast mode Jun 12 23:03:50.845706 kernel: veth4de9854 (unregistering): left promiscuous mode Jun 12 23:03:50.832000 audit: ANOM_PROMISCUOUS dev=veth4de9854 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:50.849407 kernel: docker0: port 1(veth4de9854) entered disabled state Jun 12 23:03:50.832000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fef80 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:50.832000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:50.862163 systemd[1]: run-docker-netns-936590d7bf30.mount: Deactivated successfully. Jun 12 23:03:50.865393 systemd[1]: var-lib-docker-overlay2-4722ecec54736742f37aaa73f03f7c06d93c2e91b65300676b3b03e12140f0c2-merged.mount: Deactivated successfully. Jun 12 23:03:50.879000 audit: BPF prog-id=354 op=UNLOAD Jun 12 23:03:50.879000 audit: BPF prog-id=358 op=UNLOAD Jun 12 23:03:50.959059 systemd[1]: var-lib-docker-overlay2-cdd145f84658bd46c9c846b82c1ab2a53e635bc5ad8ffe3e3d689cf08dcc6ebd\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:51.018154 containerd[2455]: time="2026-06-12T23:03:51.018105675Z" level=info msg="connecting to shim 88be25294749582f60244083968d69ebd8e09053788e84ad13aeee28b34d9334" address="unix:///run/containerd/s/44305e601cdaf7779707e32576cfb82c1576469e4be8ca345c3ad32b79bd805b" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:51.039940 systemd[1]: Started docker-88be25294749582f60244083968d69ebd8e09053788e84ad13aeee28b34d9334.scope - libcontainer container 88be25294749582f60244083968d69ebd8e09053788e84ad13aeee28b34d9334. Jun 12 23:03:51.047000 audit: BPF prog-id=359 op=LOAD Jun 12 23:03:51.047000 audit: BPF prog-id=360 op=LOAD Jun 12 23:03:51.047000 audit[8797]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=70263d237f80 a2=98 a3=0 items=0 ppid=8787 pid=8797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:51.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38386265323532393437343935383266363032343430383339 Jun 12 23:03:51.047000 audit: BPF prog-id=360 op=UNLOAD Jun 12 23:03:51.047000 audit[8797]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8787 pid=8797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:51.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38386265323532393437343935383266363032343430383339 Jun 12 23:03:51.047000 audit: BPF prog-id=361 op=LOAD Jun 12 23:03:51.047000 audit[8797]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=70263d238258 a2=98 a3=0 items=0 ppid=8787 pid=8797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:51.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38386265323532393437343935383266363032343430383339 Jun 12 23:03:51.047000 audit: BPF prog-id=362 op=LOAD Jun 12 23:03:51.047000 audit[8797]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=70263d237f98 a2=98 a3=0 items=0 ppid=8787 pid=8797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:51.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38386265323532393437343935383266363032343430383339 Jun 12 23:03:51.047000 audit: BPF prog-id=362 op=UNLOAD Jun 12 23:03:51.047000 audit[8797]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8787 pid=8797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:51.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38386265323532393437343935383266363032343430383339 Jun 12 23:03:51.047000 audit: BPF prog-id=361 op=UNLOAD Jun 12 23:03:51.047000 audit[8797]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8787 pid=8797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:51.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38386265323532393437343935383266363032343430383339 Jun 12 23:03:51.047000 audit: BPF prog-id=363 op=LOAD Jun 12 23:03:51.047000 audit[8797]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=70263d2384a8 a2=98 a3=0 items=0 ppid=8787 pid=8797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:51.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38386265323532393437343935383266363032343430383339 Jun 12 23:03:51.065814 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:51.069662 kernel: docker0: port 1(veth4bc88bd) entered blocking state Jun 12 23:03:51.069731 kernel: docker0: port 1(veth4bc88bd) entered disabled state Jun 12 23:03:51.073489 kernel: veth4bc88bd: entered allmulticast mode Jun 12 23:03:51.076577 kernel: veth4bc88bd: entered promiscuous mode Jun 12 23:03:51.061000 audit: ANOM_PROMISCUOUS dev=veth4bc88bd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:51.061000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b482120 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:51.061000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:51.077000 audit[8820]: NETFILTER_CFG table=raw:163 family=2 entries=1 op=nft_register_rule pid=8820 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:51.077000 audit[8820]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe34d1640 a2=0 a3=0 items=0 ppid=2935 pid=8820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:51.077000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:51.079764 systemd-networkd[2176]: veth4bc88bd: Link UP Jun 12 23:03:51.092797 kernel: eth0: renamed from veth2ae62ac Jun 12 23:03:51.099762 kernel: docker0: port 1(veth4bc88bd) entered blocking state Jun 12 23:03:51.099851 kernel: docker0: port 1(veth4bc88bd) entered forwarding state Jun 12 23:03:51.100082 systemd-networkd[2176]: veth4bc88bd: Gained carrier Jun 12 23:03:51.100406 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:51.142688 sshd[8745]: Invalid user kali from 43.160.253.60 port 58606 Jun 12 23:03:51.304275 sshd[8745]: Connection closed by invalid user kali 43.160.253.60 port 58606 [preauth] Jun 12 23:03:51.303000 audit[8745]: AUDIT1109 pid=8745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:51.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@76-48-10.0.0.35:22-43.160.253.60:58606 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:51.306359 systemd[1]: sshd@76-48-10.0.0.35:22-43.160.253.60:58606.service: Deactivated successfully. Jun 12 23:03:51.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-49-10.0.0.35:22-43.160.253.60:58614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:51.476274 systemd[1]: Started sshd@77-49-10.0.0.35:22-43.160.253.60:58614.service - OpenSSH per-connection server daemon (43.160.253.60:58614). Jun 12 23:03:51.986812 sshd[8831]: Invalid user sapadm from 43.160.253.60 port 58614 Jun 12 23:03:52.125019 systemd[1]: docker-88be25294749582f60244083968d69ebd8e09053788e84ad13aeee28b34d9334.scope: Deactivated successfully. Jun 12 23:03:52.136762 dockerd[2935]: time="2026-06-12T23:03:52.136630193Z" level=info msg="ignoring event" container=88be25294749582f60244083968d69ebd8e09053788e84ad13aeee28b34d9334 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:52.137898 containerd[2455]: time="2026-06-12T23:03:52.137740397Z" level=info msg="shim disconnected" id=88be25294749582f60244083968d69ebd8e09053788e84ad13aeee28b34d9334 namespace=moby Jun 12 23:03:52.137898 containerd[2455]: time="2026-06-12T23:03:52.137770083Z" level=info msg="cleaning up after shim disconnected" id=88be25294749582f60244083968d69ebd8e09053788e84ad13aeee28b34d9334 namespace=moby Jun 12 23:03:52.137898 containerd[2455]: time="2026-06-12T23:03:52.137775795Z" level=info msg="cleaning up dead shim" id=88be25294749582f60244083968d69ebd8e09053788e84ad13aeee28b34d9334 namespace=moby Jun 12 23:03:52.148401 sshd[8831]: Connection closed by invalid user sapadm 43.160.253.60 port 58614 [preauth] Jun 12 23:03:52.148000 audit[8831]: AUDIT1109 pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:52.150326 systemd[1]: sshd@77-49-10.0.0.35:22-43.160.253.60:58614.service: Deactivated successfully. Jun 12 23:03:52.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@77-49-10.0.0.35:22-43.160.253.60:58614 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:52.158176 systemd-networkd[2176]: veth4bc88bd: Lost carrier Jun 12 23:03:52.160422 kernel: docker0: port 1(veth4bc88bd) entered disabled state Jun 12 23:03:52.160463 kernel: veth2ae62ac: renamed from eth0 Jun 12 23:03:52.172000 audit[8857]: NETFILTER_CFG table=raw:164 family=2 entries=1 op=nft_unregister_rule pid=8857 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:52.172000 audit[8857]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc0c868e0 a2=0 a3=0 items=0 ppid=2935 pid=8857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.172000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:52.184265 systemd-networkd[2176]: veth4bc88bd: Link DOWN Jun 12 23:03:52.188832 kernel: docker0: port 1(veth4bc88bd) entered disabled state Jun 12 23:03:52.196945 kernel: veth4bc88bd (unregistering): left allmulticast mode Jun 12 23:03:52.197011 kernel: veth4bc88bd (unregistering): left promiscuous mode Jun 12 23:03:52.183000 audit: ANOM_PROMISCUOUS dev=veth4bc88bd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:52.200421 kernel: docker0: port 1(veth4bc88bd) entered disabled state Jun 12 23:03:52.183000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b324de0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.183000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:52.212651 systemd[1]: run-docker-netns-7b552f5baebd.mount: Deactivated successfully. Jun 12 23:03:52.214975 systemd[1]: var-lib-docker-overlay2-cdd145f84658bd46c9c846b82c1ab2a53e635bc5ad8ffe3e3d689cf08dcc6ebd-merged.mount: Deactivated successfully. Jun 12 23:03:52.223000 audit: BPF prog-id=359 op=UNLOAD Jun 12 23:03:52.223000 audit: BPF prog-id=363 op=UNLOAD Jun 12 23:03:52.315000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-50-10.0.0.35:22-43.160.253.60:58628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:52.316041 systemd[1]: Started sshd@78-50-10.0.0.35:22-43.160.253.60:58628.service - OpenSSH per-connection server daemon (43.160.253.60:58628). Jun 12 23:03:52.345898 containerd[2455]: time="2026-06-12T23:03:52.345857311Z" level=info msg="connecting to shim f356748f313aded04ae870e6787d3eb42905e8b6e2b1607b833a40a0380f5f7b" address="unix:///run/containerd/s/b1d1e51b076febf1a0e05f8758e46067e336312c4bc157b683032f29c9dfbdb8" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:52.371945 systemd[1]: Started docker-f356748f313aded04ae870e6787d3eb42905e8b6e2b1607b833a40a0380f5f7b.scope - libcontainer container f356748f313aded04ae870e6787d3eb42905e8b6e2b1607b833a40a0380f5f7b. Jun 12 23:03:52.380000 audit: BPF prog-id=364 op=LOAD Jun 12 23:03:52.380000 audit: BPF prog-id=365 op=LOAD Jun 12 23:03:52.380000 audit[8892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=72b891f37f80 a2=98 a3=0 items=0 ppid=8881 pid=8892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536373438663331336164656430346165383730653637 Jun 12 23:03:52.380000 audit: BPF prog-id=365 op=UNLOAD Jun 12 23:03:52.380000 audit[8892]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8881 pid=8892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536373438663331336164656430346165383730653637 Jun 12 23:03:52.381000 audit: BPF prog-id=366 op=LOAD Jun 12 23:03:52.381000 audit[8892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=72b891f38258 a2=98 a3=0 items=0 ppid=8881 pid=8892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536373438663331336164656430346165383730653637 Jun 12 23:03:52.381000 audit: BPF prog-id=367 op=LOAD Jun 12 23:03:52.381000 audit[8892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=72b891f37f98 a2=98 a3=0 items=0 ppid=8881 pid=8892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536373438663331336164656430346165383730653637 Jun 12 23:03:52.381000 audit: BPF prog-id=367 op=UNLOAD Jun 12 23:03:52.381000 audit[8892]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8881 pid=8892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536373438663331336164656430346165383730653637 Jun 12 23:03:52.381000 audit: BPF prog-id=366 op=UNLOAD Jun 12 23:03:52.381000 audit[8892]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8881 pid=8892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536373438663331336164656430346165383730653637 Jun 12 23:03:52.381000 audit: BPF prog-id=368 op=LOAD Jun 12 23:03:52.381000 audit[8892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=72b891f384a8 a2=98 a3=0 items=0 ppid=8881 pid=8892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66333536373438663331336164656430346165383730653637 Jun 12 23:03:52.404226 kernel: docker0: port 1(veth2457c6d) entered blocking state Jun 12 23:03:52.404317 kernel: docker0: port 1(veth2457c6d) entered disabled state Jun 12 23:03:52.407224 kernel: veth2457c6d: entered allmulticast mode Jun 12 23:03:52.409864 kernel: veth2457c6d: entered promiscuous mode Jun 12 23:03:52.395000 audit: ANOM_PROMISCUOUS dev=veth2457c6d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:52.395000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaa7b0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.395000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:52.410679 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:52.412000 audit[8912]: NETFILTER_CFG table=raw:165 family=2 entries=1 op=nft_register_rule pid=8912 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:52.412000 audit[8912]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffeb04e500 a2=0 a3=0 items=0 ppid=2935 pid=8912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:52.412000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:52.413258 systemd-networkd[2176]: veth2457c6d: Link UP Jun 12 23:03:52.428804 kernel: eth0: renamed from vethcb97785 Jun 12 23:03:52.436026 kernel: docker0: port 1(veth2457c6d) entered blocking state Jun 12 23:03:52.436100 kernel: docker0: port 1(veth2457c6d) entered forwarding state Jun 12 23:03:52.436453 systemd-networkd[2176]: veth2457c6d: Gained carrier Jun 12 23:03:52.436941 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:52.823564 sshd[8867]: Invalid user postgres from 43.160.253.60 port 58628 Jun 12 23:03:52.986433 sshd[8867]: Connection closed by invalid user postgres 43.160.253.60 port 58628 [preauth] Jun 12 23:03:52.984000 audit[8867]: AUDIT1109 pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:52.987895 systemd[1]: sshd@78-50-10.0.0.35:22-43.160.253.60:58628.service: Deactivated successfully. Jun 12 23:03:52.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@78-50-10.0.0.35:22-43.160.253.60:58628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:53.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-51-10.0.0.35:22-43.160.253.60:58642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:53.155927 systemd[1]: Started sshd@79-51-10.0.0.35:22-43.160.253.60:58642.service - OpenSSH per-connection server daemon (43.160.253.60:58642). Jun 12 23:03:53.467696 systemd[1]: docker-f356748f313aded04ae870e6787d3eb42905e8b6e2b1607b833a40a0380f5f7b.scope: Deactivated successfully. Jun 12 23:03:53.479490 dockerd[2935]: time="2026-06-12T23:03:53.479447879Z" level=info msg="ignoring event" container=f356748f313aded04ae870e6787d3eb42905e8b6e2b1607b833a40a0380f5f7b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:53.480048 containerd[2455]: time="2026-06-12T23:03:53.479774607Z" level=info msg="shim disconnected" id=f356748f313aded04ae870e6787d3eb42905e8b6e2b1607b833a40a0380f5f7b namespace=moby Jun 12 23:03:53.480048 containerd[2455]: time="2026-06-12T23:03:53.479817525Z" level=info msg="cleaning up after shim disconnected" id=f356748f313aded04ae870e6787d3eb42905e8b6e2b1607b833a40a0380f5f7b namespace=moby Jun 12 23:03:53.480048 containerd[2455]: time="2026-06-12T23:03:53.479823620Z" level=info msg="cleaning up dead shim" id=f356748f313aded04ae870e6787d3eb42905e8b6e2b1607b833a40a0380f5f7b namespace=moby Jun 12 23:03:53.504741 kernel: vethcb97785: renamed from eth0 Jun 12 23:03:53.504541 systemd-networkd[2176]: veth2457c6d: Lost carrier Jun 12 23:03:53.505050 kernel: docker0: port 1(veth2457c6d) entered disabled state Jun 12 23:03:53.522000 audit[8949]: NETFILTER_CFG table=raw:166 family=2 entries=1 op=nft_unregister_rule pid=8949 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:53.522000 audit[8949]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe9f02ad0 a2=0 a3=0 items=0 ppid=2935 pid=8949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.522000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:53.528138 systemd-networkd[2176]: veth2457c6d: Link DOWN Jun 12 23:03:53.535774 kernel: docker0: port 1(veth2457c6d) entered disabled state Jun 12 23:03:53.535857 kernel: veth2457c6d (unregistering): left allmulticast mode Jun 12 23:03:53.539734 kernel: veth2457c6d (unregistering): left promiscuous mode Jun 12 23:03:53.526000 audit: ANOM_PROMISCUOUS dev=veth2457c6d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:53.543242 kernel: docker0: port 1(veth2457c6d) entered disabled state Jun 12 23:03:53.526000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb30a80 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.526000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:53.551865 systemd[1]: run-docker-netns-56576e926f15.mount: Deactivated successfully. Jun 12 23:03:53.557304 systemd[1]: var-lib-docker-overlay2-a4b0cfab8d0d8e2919f3d8f7ea299b8731bebeb21567c0ecc63473034cdcfa73-merged.mount: Deactivated successfully. Jun 12 23:03:53.560000 audit: BPF prog-id=364 op=UNLOAD Jun 12 23:03:53.560000 audit: BPF prog-id=368 op=UNLOAD Jun 12 23:03:53.637279 systemd[1]: var-lib-docker-overlay2-21dca97cf73ce58aadad29ed3fb7c7fce808c28ccbbd7b7fb2dd7bf57fdcb7e5\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:53.703905 containerd[2455]: time="2026-06-12T23:03:53.703836847Z" level=info msg="connecting to shim 0c0ef3004dfc8002412e1e2fc1b03bc3089c8b6e49e2a33d7ab2213fba5da8cd" address="unix:///run/containerd/s/69c51436a87bb68643f74c99eb01775a6623b57f1d2a50fccb93e424b0ef0b34" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:53.724935 systemd[1]: Started docker-0c0ef3004dfc8002412e1e2fc1b03bc3089c8b6e49e2a33d7ab2213fba5da8cd.scope - libcontainer container 0c0ef3004dfc8002412e1e2fc1b03bc3089c8b6e49e2a33d7ab2213fba5da8cd. Jun 12 23:03:53.731000 audit: BPF prog-id=369 op=LOAD Jun 12 23:03:53.731000 audit: BPF prog-id=370 op=LOAD Jun 12 23:03:53.731000 audit[8978]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4a0892137f80 a2=98 a3=0 items=0 ppid=8967 pid=8978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633065663330303464666338303032343132653165326663 Jun 12 23:03:53.731000 audit: BPF prog-id=370 op=UNLOAD Jun 12 23:03:53.731000 audit[8978]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8967 pid=8978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633065663330303464666338303032343132653165326663 Jun 12 23:03:53.732000 audit: BPF prog-id=371 op=LOAD Jun 12 23:03:53.732000 audit[8978]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4a0892138258 a2=98 a3=0 items=0 ppid=8967 pid=8978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633065663330303464666338303032343132653165326663 Jun 12 23:03:53.732000 audit: BPF prog-id=372 op=LOAD Jun 12 23:03:53.732000 audit[8978]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=4a0892137f98 a2=98 a3=0 items=0 ppid=8967 pid=8978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633065663330303464666338303032343132653165326663 Jun 12 23:03:53.732000 audit: BPF prog-id=372 op=UNLOAD Jun 12 23:03:53.732000 audit[8978]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=8967 pid=8978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633065663330303464666338303032343132653165326663 Jun 12 23:03:53.732000 audit: BPF prog-id=371 op=UNLOAD Jun 12 23:03:53.732000 audit[8978]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=8967 pid=8978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633065663330303464666338303032343132653165326663 Jun 12 23:03:53.732000 audit: BPF prog-id=373 op=LOAD Jun 12 23:03:53.732000 audit[8978]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=4a08921384a8 a2=98 a3=0 items=0 ppid=8967 pid=8978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30633065663330303464666338303032343132653165326663 Jun 12 23:03:53.750857 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:53.754795 kernel: docker0: port 1(vethe96c9bd) entered blocking state Jun 12 23:03:53.754876 kernel: docker0: port 1(vethe96c9bd) entered disabled state Jun 12 23:03:53.754907 kernel: vethe96c9bd: entered allmulticast mode Jun 12 23:03:53.745000 audit: ANOM_PROMISCUOUS dev=vethe96c9bd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:53.760810 kernel: vethe96c9bd: entered promiscuous mode Jun 12 23:03:53.745000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beab980 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.745000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:53.763000 audit[8999]: NETFILTER_CFG table=raw:167 family=2 entries=1 op=nft_register_rule pid=8999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:53.763000 audit[8999]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcb465110 a2=0 a3=0 items=0 ppid=2935 pid=8999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:53.763000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:53.767134 systemd-networkd[2176]: vethe96c9bd: Link UP Jun 12 23:03:53.779954 kernel: eth0: renamed from veth35c3b58 Jun 12 23:03:53.787892 kernel: docker0: port 1(vethe96c9bd) entered blocking state Jun 12 23:03:53.787687 systemd-networkd[2176]: vethe96c9bd: Gained carrier Jun 12 23:03:53.788398 kernel: docker0: port 1(vethe96c9bd) entered forwarding state Jun 12 23:03:53.787953 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:53.827014 sshd[8924]: Connection closed by authenticating user root 43.160.253.60 port 58642 [preauth] Jun 12 23:03:53.826000 audit[8924]: AUDIT1109 pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:53.829368 systemd[1]: sshd@79-51-10.0.0.35:22-43.160.253.60:58642.service: Deactivated successfully. Jun 12 23:03:53.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@79-51-10.0.0.35:22-43.160.253.60:58642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:53.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-52-10.0.0.35:22-43.160.253.60:58650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:53.998268 systemd[1]: Started sshd@80-52-10.0.0.35:22-43.160.253.60:58650.service - OpenSSH per-connection server daemon (43.160.253.60:58650). Jun 12 23:03:54.509027 sshd[9010]: Invalid user sonar from 43.160.253.60 port 58650 Jun 12 23:03:54.670153 sshd[9010]: Connection closed by invalid user sonar 43.160.253.60 port 58650 [preauth] Jun 12 23:03:54.668000 audit[9010]: AUDIT1109 pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:54.674919 kernel: kauditd_printk_skb: 144 callbacks suppressed Jun 12 23:03:54.672359 systemd[1]: sshd@80-52-10.0.0.35:22-43.160.253.60:58650.service: Deactivated successfully. Jun 12 23:03:54.675175 kernel: audit: type=1109 audit(1781305434.668:1465): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:54.670000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-52-10.0.0.35:22-43.160.253.60:58650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:54.702980 kernel: audit: type=1131 audit(1781305434.670:1466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@80-52-10.0.0.35:22-43.160.253.60:58650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:54.813160 systemd[1]: docker-0c0ef3004dfc8002412e1e2fc1b03bc3089c8b6e49e2a33d7ab2213fba5da8cd.scope: Deactivated successfully. Jun 12 23:03:54.825191 dockerd[2935]: time="2026-06-12T23:03:54.825157451Z" level=info msg="ignoring event" container=0c0ef3004dfc8002412e1e2fc1b03bc3089c8b6e49e2a33d7ab2213fba5da8cd module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:54.826523 containerd[2455]: time="2026-06-12T23:03:54.826388405Z" level=info msg="shim disconnected" id=0c0ef3004dfc8002412e1e2fc1b03bc3089c8b6e49e2a33d7ab2213fba5da8cd namespace=moby Jun 12 23:03:54.826523 containerd[2455]: time="2026-06-12T23:03:54.826416436Z" level=info msg="cleaning up after shim disconnected" id=0c0ef3004dfc8002412e1e2fc1b03bc3089c8b6e49e2a33d7ab2213fba5da8cd namespace=moby Jun 12 23:03:54.826523 containerd[2455]: time="2026-06-12T23:03:54.826422676Z" level=info msg="cleaning up dead shim" id=0c0ef3004dfc8002412e1e2fc1b03bc3089c8b6e49e2a33d7ab2213fba5da8cd namespace=moby Jun 12 23:03:54.845402 systemd[1]: Started sshd@81-4126-10.0.0.35:22-43.160.253.60:58662.service - OpenSSH per-connection server daemon (43.160.253.60:58662). Jun 12 23:03:54.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-4126-10.0.0.35:22-43.160.253.60:58662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:54.861798 kernel: audit: type=1130 audit(1781305434.843:1467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-4126-10.0.0.35:22-43.160.253.60:58662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:54.865659 systemd-networkd[2176]: vethe96c9bd: Lost carrier Jun 12 23:03:54.866115 kernel: docker0: port 1(vethe96c9bd) entered disabled state Jun 12 23:03:54.869787 kernel: veth35c3b58: renamed from eth0 Jun 12 23:03:54.884000 audit[9042]: NETFILTER_CFG table=raw:168 family=2 entries=1 op=nft_unregister_rule pid=9042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:54.884000 audit[9042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc6525380 a2=0 a3=0 items=0 ppid=2935 pid=9042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:54.914740 kernel: audit: type=1325 audit(1781305434.884:1468): table=raw:168 family=2 entries=1 op=nft_unregister_rule pid=9042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:54.914773 kernel: audit: type=1300 audit(1781305434.884:1468): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc6525380 a2=0 a3=0 items=0 ppid=2935 pid=9042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:54.884000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:54.927722 kernel: audit: type=1327 audit(1781305434.884:1468): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:54.928559 systemd-networkd[2176]: vethe96c9bd: Link DOWN Jun 12 23:03:54.936734 kernel: docker0: port 1(vethe96c9bd) entered disabled state Jun 12 23:03:54.936814 kernel: vethe96c9bd (unregistering): left allmulticast mode Jun 12 23:03:54.940546 kernel: vethe96c9bd (unregistering): left promiscuous mode Jun 12 23:03:54.927000 audit: ANOM_PROMISCUOUS dev=vethe96c9bd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:54.947935 kernel: audit: type=1700 audit(1781305434.927:1469): dev=vethe96c9bd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:54.950786 kernel: docker0: port 1(vethe96c9bd) entered disabled state Jun 12 23:03:54.927000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb313c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:54.959672 systemd[1]: run-docker-netns-e322f24f2013.mount: Deactivated successfully. Jun 12 23:03:54.927000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:54.978865 systemd[1]: var-lib-docker-overlay2-21dca97cf73ce58aadad29ed3fb7c7fce808c28ccbbd7b7fb2dd7bf57fdcb7e5-merged.mount: Deactivated successfully. Jun 12 23:03:54.992757 kernel: audit: type=1300 audit(1781305434.927:1469): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb313c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:54.992815 kernel: audit: type=1327 audit(1781305434.927:1469): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:55.002000 audit: BPF prog-id=369 op=UNLOAD Jun 12 23:03:55.002000 audit: BPF prog-id=373 op=UNLOAD Jun 12 23:03:55.008791 kernel: audit: type=1334 audit(1781305435.002:1470): prog-id=369 op=UNLOAD Jun 12 23:03:55.102748 systemd[1]: var-lib-docker-overlay2-aaf2da2897f49b1b40537a8e40e92b3bc00177741a77873b4b6efa40f08a327b\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:55.159817 containerd[2455]: time="2026-06-12T23:03:55.159643190Z" level=info msg="connecting to shim ab50f31a5eda46ace5259d9886a89a3837dec9ec1e1cd5ed40dd6d2b81053479" address="unix:///run/containerd/s/d98d170bcbc0a819bd9deffcaac6465f8f7e0c249de1b29bd37563aa165a86c9" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:55.178944 systemd[1]: Started docker-ab50f31a5eda46ace5259d9886a89a3837dec9ec1e1cd5ed40dd6d2b81053479.scope - libcontainer container ab50f31a5eda46ace5259d9886a89a3837dec9ec1e1cd5ed40dd6d2b81053479. Jun 12 23:03:55.185000 audit: BPF prog-id=374 op=LOAD Jun 12 23:03:55.186000 audit: BPF prog-id=375 op=LOAD Jun 12 23:03:55.186000 audit[9069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=65d942637f80 a2=98 a3=0 items=0 ppid=9058 pid=9069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:55.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623530663331613565646134366163653532353964393838 Jun 12 23:03:55.186000 audit: BPF prog-id=375 op=UNLOAD Jun 12 23:03:55.186000 audit[9069]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9058 pid=9069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:55.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623530663331613565646134366163653532353964393838 Jun 12 23:03:55.186000 audit: BPF prog-id=376 op=LOAD Jun 12 23:03:55.186000 audit[9069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=65d942638258 a2=98 a3=0 items=0 ppid=9058 pid=9069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:55.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623530663331613565646134366163653532353964393838 Jun 12 23:03:55.186000 audit: BPF prog-id=377 op=LOAD Jun 12 23:03:55.186000 audit[9069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=65d942637f98 a2=98 a3=0 items=0 ppid=9058 pid=9069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:55.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623530663331613565646134366163653532353964393838 Jun 12 23:03:55.186000 audit: BPF prog-id=377 op=UNLOAD Jun 12 23:03:55.186000 audit[9069]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9058 pid=9069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:55.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623530663331613565646134366163653532353964393838 Jun 12 23:03:55.186000 audit: BPF prog-id=376 op=UNLOAD Jun 12 23:03:55.186000 audit[9069]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9058 pid=9069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:55.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623530663331613565646134366163653532353964393838 Jun 12 23:03:55.186000 audit: BPF prog-id=378 op=LOAD Jun 12 23:03:55.186000 audit[9069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=65d9426384a8 a2=98 a3=0 items=0 ppid=9058 pid=9069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:55.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61623530663331613565646134366163653532353964393838 Jun 12 23:03:55.200490 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:55.209274 kernel: docker0: port 1(veth20d9de4) entered blocking state Jun 12 23:03:55.209350 kernel: docker0: port 1(veth20d9de4) entered disabled state Jun 12 23:03:55.212188 kernel: veth20d9de4: entered allmulticast mode Jun 12 23:03:55.215348 kernel: veth20d9de4: entered promiscuous mode Jun 12 23:03:55.198000 audit: ANOM_PROMISCUOUS dev=veth20d9de4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:55.198000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52f920 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:55.198000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:55.216000 audit[9090]: NETFILTER_CFG table=raw:169 family=2 entries=1 op=nft_register_rule pid=9090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:55.216000 audit[9090]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffb6d9240 a2=0 a3=0 items=0 ppid=2935 pid=9090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:55.216000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:55.218811 systemd-networkd[2176]: veth20d9de4: Link UP Jun 12 23:03:55.240345 kernel: eth0: renamed from veth5954bb4 Jun 12 23:03:55.240446 kernel: docker0: port 1(veth20d9de4) entered blocking state Jun 12 23:03:55.240391 systemd-networkd[2176]: veth20d9de4: Gained carrier Jun 12 23:03:55.240542 kernel: docker0: port 1(veth20d9de4) entered forwarding state Jun 12 23:03:55.240918 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:55.405620 sshd[9037]: Invalid user ubuntu from 43.160.253.60 port 58662 Jun 12 23:03:55.568239 sshd[9037]: Connection closed by invalid user ubuntu 43.160.253.60 port 58662 [preauth] Jun 12 23:03:55.566000 audit[9037]: AUDIT1109 pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:55.569758 systemd[1]: sshd@81-4126-10.0.0.35:22-43.160.253.60:58662.service: Deactivated successfully. Jun 12 23:03:55.568000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@81-4126-10.0.0.35:22-43.160.253.60:58662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:55.740044 systemd[1]: Started sshd@82-4127-10.0.0.35:22-43.160.253.60:44022.service - OpenSSH per-connection server daemon (43.160.253.60:44022). Jun 12 23:03:55.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-4127-10.0.0.35:22-43.160.253.60:44022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:56.251541 sshd[9102]: Invalid user google from 43.160.253.60 port 44022 Jun 12 23:03:56.264706 systemd[1]: docker-ab50f31a5eda46ace5259d9886a89a3837dec9ec1e1cd5ed40dd6d2b81053479.scope: Deactivated successfully. Jun 12 23:03:56.276599 dockerd[2935]: time="2026-06-12T23:03:56.276472637Z" level=info msg="ignoring event" container=ab50f31a5eda46ace5259d9886a89a3837dec9ec1e1cd5ed40dd6d2b81053479 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:56.277238 containerd[2455]: time="2026-06-12T23:03:56.276579239Z" level=info msg="shim disconnected" id=ab50f31a5eda46ace5259d9886a89a3837dec9ec1e1cd5ed40dd6d2b81053479 namespace=moby Jun 12 23:03:56.277238 containerd[2455]: time="2026-06-12T23:03:56.276831795Z" level=info msg="cleaning up after shim disconnected" id=ab50f31a5eda46ace5259d9886a89a3837dec9ec1e1cd5ed40dd6d2b81053479 namespace=moby Jun 12 23:03:56.277238 containerd[2455]: time="2026-06-12T23:03:56.276841554Z" level=info msg="cleaning up dead shim" id=ab50f31a5eda46ace5259d9886a89a3837dec9ec1e1cd5ed40dd6d2b81053479 namespace=moby Jun 12 23:03:56.298822 kernel: docker0: port 1(veth20d9de4) entered disabled state Jun 12 23:03:56.299079 systemd-networkd[2176]: veth20d9de4: Lost carrier Jun 12 23:03:56.302805 kernel: veth5954bb4: renamed from eth0 Jun 12 23:03:56.316000 audit[9127]: NETFILTER_CFG table=raw:170 family=2 entries=1 op=nft_unregister_rule pid=9127 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:56.316000 audit[9127]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffb2d9630 a2=0 a3=0 items=0 ppid=2935 pid=9127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.316000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:56.323256 systemd-networkd[2176]: veth20d9de4: Link DOWN Jun 12 23:03:56.328108 kernel: docker0: port 1(veth20d9de4) entered disabled state Jun 12 23:03:56.336833 kernel: veth20d9de4 (unregistering): left allmulticast mode Jun 12 23:03:56.336899 kernel: veth20d9de4 (unregistering): left promiscuous mode Jun 12 23:03:56.321000 audit: ANOM_PROMISCUOUS dev=veth20d9de4 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:56.337367 kernel: docker0: port 1(veth20d9de4) entered disabled state Jun 12 23:03:56.321000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6800 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.321000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:56.351558 systemd[1]: run-docker-netns-80c7585d5cf0.mount: Deactivated successfully. Jun 12 23:03:56.355279 systemd[1]: var-lib-docker-overlay2-aaf2da2897f49b1b40537a8e40e92b3bc00177741a77873b4b6efa40f08a327b-merged.mount: Deactivated successfully. Jun 12 23:03:56.361000 audit: BPF prog-id=374 op=UNLOAD Jun 12 23:03:56.361000 audit: BPF prog-id=378 op=UNLOAD Jun 12 23:03:56.413512 sshd[9102]: Connection closed by invalid user google 43.160.253.60 port 44022 [preauth] Jun 12 23:03:56.412000 audit[9102]: AUDIT1109 pid=9102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:56.415427 systemd[1]: sshd@82-4127-10.0.0.35:22-43.160.253.60:44022.service: Deactivated successfully. Jun 12 23:03:56.414000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@82-4127-10.0.0.35:22-43.160.253.60:44022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:56.521566 containerd[2455]: time="2026-06-12T23:03:56.521380149Z" level=info msg="connecting to shim 68eddc2a040a01f1695beca2ff1eb4b4fc4c9afac4ac169e48b4f251fe0a87c8" address="unix:///run/containerd/s/d79dcb791b5bbb3908e14df7e951bf974765ee6fa9dafeef32013371f0da10cc" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:56.548944 systemd[1]: Started docker-68eddc2a040a01f1695beca2ff1eb4b4fc4c9afac4ac169e48b4f251fe0a87c8.scope - libcontainer container 68eddc2a040a01f1695beca2ff1eb4b4fc4c9afac4ac169e48b4f251fe0a87c8. Jun 12 23:03:56.558000 audit: BPF prog-id=379 op=LOAD Jun 12 23:03:56.558000 audit: BPF prog-id=380 op=LOAD Jun 12 23:03:56.558000 audit[9158]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=228d0910df80 a2=98 a3=0 items=0 ppid=9146 pid=9158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36386564646332613034306130316631363935626563613266 Jun 12 23:03:56.558000 audit: BPF prog-id=380 op=UNLOAD Jun 12 23:03:56.558000 audit[9158]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9146 pid=9158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36386564646332613034306130316631363935626563613266 Jun 12 23:03:56.558000 audit: BPF prog-id=381 op=LOAD Jun 12 23:03:56.558000 audit[9158]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=228d0910e258 a2=98 a3=0 items=0 ppid=9146 pid=9158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36386564646332613034306130316631363935626563613266 Jun 12 23:03:56.559000 audit: BPF prog-id=382 op=LOAD Jun 12 23:03:56.559000 audit[9158]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=228d0910df98 a2=98 a3=0 items=0 ppid=9146 pid=9158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36386564646332613034306130316631363935626563613266 Jun 12 23:03:56.559000 audit: BPF prog-id=382 op=UNLOAD Jun 12 23:03:56.559000 audit[9158]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9146 pid=9158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36386564646332613034306130316631363935626563613266 Jun 12 23:03:56.559000 audit: BPF prog-id=381 op=UNLOAD Jun 12 23:03:56.559000 audit[9158]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9146 pid=9158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36386564646332613034306130316631363935626563613266 Jun 12 23:03:56.559000 audit: BPF prog-id=383 op=LOAD Jun 12 23:03:56.559000 audit[9158]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=228d0910e4a8 a2=98 a3=0 items=0 ppid=9146 pid=9158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36386564646332613034306130316631363935626563613266 Jun 12 23:03:56.582236 kernel: docker0: port 1(veth95bfa51) entered blocking state Jun 12 23:03:56.582316 kernel: docker0: port 1(veth95bfa51) entered disabled state Jun 12 23:03:56.585069 kernel: veth95bfa51: entered allmulticast mode Jun 12 23:03:56.588128 kernel: veth95bfa51: entered promiscuous mode Jun 12 23:03:56.572000 audit: ANOM_PROMISCUOUS dev=veth95bfa51 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:56.572000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f8540 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.572000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:56.590883 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:56.592000 audit[9180]: NETFILTER_CFG table=raw:171 family=2 entries=1 op=nft_register_rule pid=9180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:56.592000 audit[9180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff50d38c0 a2=0 a3=0 items=0 ppid=2935 pid=9180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:56.592000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:56.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-53-10.0.0.35:22-43.160.253.60:44032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:56.594547 systemd[1]: Started sshd@83-53-10.0.0.35:22-43.160.253.60:44032.service - OpenSSH per-connection server daemon (43.160.253.60:44032). Jun 12 23:03:56.597836 systemd-networkd[2176]: veth95bfa51: Link UP Jun 12 23:03:56.624792 kernel: eth0: renamed from veth93a55db Jun 12 23:03:56.624864 kernel: docker0: port 1(veth95bfa51) entered blocking state Jun 12 23:03:56.624793 systemd-networkd[2176]: veth95bfa51: Gained carrier Jun 12 23:03:56.624946 kernel: docker0: port 1(veth95bfa51) entered forwarding state Jun 12 23:03:56.625156 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:57.115248 sshd[9181]: Invalid user odoo from 43.160.253.60 port 44032 Jun 12 23:03:57.278094 sshd[9181]: Connection closed by invalid user odoo 43.160.253.60 port 44032 [preauth] Jun 12 23:03:57.277000 audit[9181]: AUDIT1109 pid=9181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:57.279994 systemd[1]: sshd@83-53-10.0.0.35:22-43.160.253.60:44032.service: Deactivated successfully. Jun 12 23:03:57.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@83-53-10.0.0.35:22-43.160.253.60:44032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:57.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-4128-10.0.0.35:22-43.160.253.60:44034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:57.453374 systemd[1]: Started sshd@84-4128-10.0.0.35:22-43.160.253.60:44034.service - OpenSSH per-connection server daemon (43.160.253.60:44034). Jun 12 23:03:57.651419 systemd[1]: docker-68eddc2a040a01f1695beca2ff1eb4b4fc4c9afac4ac169e48b4f251fe0a87c8.scope: Deactivated successfully. Jun 12 23:03:57.662235 dockerd[2935]: time="2026-06-12T23:03:57.662195826Z" level=info msg="ignoring event" container=68eddc2a040a01f1695beca2ff1eb4b4fc4c9afac4ac169e48b4f251fe0a87c8 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:03:57.662689 containerd[2455]: time="2026-06-12T23:03:57.662656619Z" level=info msg="shim disconnected" id=68eddc2a040a01f1695beca2ff1eb4b4fc4c9afac4ac169e48b4f251fe0a87c8 namespace=moby Jun 12 23:03:57.662689 containerd[2455]: time="2026-06-12T23:03:57.662686762Z" level=info msg="cleaning up after shim disconnected" id=68eddc2a040a01f1695beca2ff1eb4b4fc4c9afac4ac169e48b4f251fe0a87c8 namespace=moby Jun 12 23:03:57.663018 containerd[2455]: time="2026-06-12T23:03:57.662693273Z" level=info msg="cleaning up dead shim" id=68eddc2a040a01f1695beca2ff1eb4b4fc4c9afac4ac169e48b4f251fe0a87c8 namespace=moby Jun 12 23:03:57.683163 kernel: docker0: port 1(veth95bfa51) entered disabled state Jun 12 23:03:57.682959 systemd-networkd[2176]: veth95bfa51: Lost carrier Jun 12 23:03:57.686796 kernel: veth93a55db: renamed from eth0 Jun 12 23:03:57.701000 audit[9221]: NETFILTER_CFG table=raw:172 family=2 entries=1 op=nft_unregister_rule pid=9221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:57.701000 audit[9221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff8d9c530 a2=0 a3=0 items=0 ppid=2935 pid=9221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.701000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:57.709173 systemd-networkd[2176]: veth95bfa51: Link DOWN Jun 12 23:03:57.717251 kernel: docker0: port 1(veth95bfa51) entered disabled state Jun 12 23:03:57.717315 kernel: veth95bfa51 (unregistering): left allmulticast mode Jun 12 23:03:57.720962 kernel: veth95bfa51 (unregistering): left promiscuous mode Jun 12 23:03:57.708000 audit: ANOM_PROMISCUOUS dev=veth95bfa51 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:57.724627 kernel: docker0: port 1(veth95bfa51) entered disabled state Jun 12 23:03:57.708000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f7040 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.708000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:57.736180 systemd[1]: run-docker-netns-428756b23bce.mount: Deactivated successfully. Jun 12 23:03:57.739301 systemd[1]: var-lib-docker-overlay2-b13059a86ffeb8f8c8fe84c6fe6e8d3c16987e6967d59b44c25ec2c26a0160be-merged.mount: Deactivated successfully. Jun 12 23:03:57.755000 audit: BPF prog-id=379 op=UNLOAD Jun 12 23:03:57.755000 audit: BPF prog-id=383 op=UNLOAD Jun 12 23:03:57.839088 systemd[1]: var-lib-docker-overlay2-aab52f73ff3f3909d7b3e56a31fa63803ad3c997a01c8f795d2aa46d1115892a\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:03:57.908363 containerd[2455]: time="2026-06-12T23:03:57.908248305Z" level=info msg="connecting to shim f07cde9ce0fd0c3221852e8dfef8310e8b42ef07a4b28beb7caf9c8dd3b03bf8" address="unix:///run/containerd/s/ae3ada55ee111ab8e08f2b20ceb2838b19d82ef0ea8c44cfe6c422d03ed99722" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:57.929931 systemd[1]: Started docker-f07cde9ce0fd0c3221852e8dfef8310e8b42ef07a4b28beb7caf9c8dd3b03bf8.scope - libcontainer container f07cde9ce0fd0c3221852e8dfef8310e8b42ef07a4b28beb7caf9c8dd3b03bf8. Jun 12 23:03:57.937000 audit: BPF prog-id=384 op=LOAD Jun 12 23:03:57.937000 audit: BPF prog-id=385 op=LOAD Jun 12 23:03:57.937000 audit[9251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f482eeb7f80 a2=98 a3=0 items=0 ppid=9239 pid=9251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303763646539636530666430633332323138353265386466 Jun 12 23:03:57.937000 audit: BPF prog-id=385 op=UNLOAD Jun 12 23:03:57.937000 audit[9251]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9239 pid=9251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303763646539636530666430633332323138353265386466 Jun 12 23:03:57.938000 audit: BPF prog-id=386 op=LOAD Jun 12 23:03:57.938000 audit[9251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f482eeb8258 a2=98 a3=0 items=0 ppid=9239 pid=9251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303763646539636530666430633332323138353265386466 Jun 12 23:03:57.938000 audit: BPF prog-id=387 op=LOAD Jun 12 23:03:57.938000 audit[9251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1f482eeb7f98 a2=98 a3=0 items=0 ppid=9239 pid=9251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303763646539636530666430633332323138353265386466 Jun 12 23:03:57.938000 audit: BPF prog-id=387 op=UNLOAD Jun 12 23:03:57.938000 audit[9251]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9239 pid=9251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303763646539636530666430633332323138353265386466 Jun 12 23:03:57.938000 audit: BPF prog-id=386 op=UNLOAD Jun 12 23:03:57.938000 audit[9251]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9239 pid=9251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303763646539636530666430633332323138353265386466 Jun 12 23:03:57.938000 audit: BPF prog-id=388 op=LOAD Jun 12 23:03:57.938000 audit[9251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1f482eeb84a8 a2=98 a3=0 items=0 ppid=9239 pid=9251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66303763646539636530666430633332323138353265386466 Jun 12 23:03:57.956506 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:57.959711 kernel: docker0: port 1(vethecffcf3) entered blocking state Jun 12 23:03:57.959767 kernel: docker0: port 1(vethecffcf3) entered disabled state Jun 12 23:03:57.963188 kernel: vethecffcf3: entered allmulticast mode Jun 12 23:03:57.966538 kernel: vethecffcf3: entered promiscuous mode Jun 12 23:03:57.951000 audit: ANOM_PROMISCUOUS dev=vethecffcf3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:57.951000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b9452f0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.951000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:57.968383 sshd[9195]: Invalid user deploy from 43.160.253.60 port 44034 Jun 12 23:03:57.967000 audit[9272]: NETFILTER_CFG table=raw:173 family=2 entries=1 op=nft_register_rule pid=9272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:57.967000 audit[9272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd3e469e0 a2=0 a3=0 items=0 ppid=2935 pid=9272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:57.967000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:57.968667 systemd-networkd[2176]: vethecffcf3: Link UP Jun 12 23:03:57.987808 kernel: eth0: renamed from vethc86b730 Jun 12 23:03:57.995780 kernel: docker0: port 1(vethecffcf3) entered blocking state Jun 12 23:03:57.995843 kernel: docker0: port 1(vethecffcf3) entered forwarding state Jun 12 23:03:57.996201 systemd-networkd[2176]: vethecffcf3: Gained carrier Jun 12 23:03:57.996710 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:58.130884 sshd[9195]: Connection closed by invalid user deploy 43.160.253.60 port 44034 [preauth] Jun 12 23:03:58.130000 audit[9195]: AUDIT1109 pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:58.132830 systemd[1]: sshd@84-4128-10.0.0.35:22-43.160.253.60:44034.service: Deactivated successfully. Jun 12 23:03:58.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@84-4128-10.0.0.35:22-43.160.253.60:44034 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:58.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-54-10.0.0.35:22-43.160.253.60:44042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:58.304051 systemd[1]: Started sshd@85-54-10.0.0.35:22-43.160.253.60:44042.service - OpenSSH per-connection server daemon (43.160.253.60:44042). Jun 12 23:03:58.820703 sshd[9283]: Invalid user deploy from 43.160.253.60 port 44042 Jun 12 23:03:58.982817 sshd[9283]: Connection closed by invalid user deploy 43.160.253.60 port 44042 [preauth] Jun 12 23:03:58.982000 audit[9283]: AUDIT1109 pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:58.984555 systemd[1]: sshd@85-54-10.0.0.35:22-43.160.253.60:44042.service: Deactivated successfully. Jun 12 23:03:58.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@85-54-10.0.0.35:22-43.160.253.60:44042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:59.019902 systemd[1]: docker-f07cde9ce0fd0c3221852e8dfef8310e8b42ef07a4b28beb7caf9c8dd3b03bf8.scope: Deactivated successfully. Jun 12 23:03:59.032047 containerd[2455]: time="2026-06-12T23:03:59.032005860Z" level=info msg="shim disconnected" id=f07cde9ce0fd0c3221852e8dfef8310e8b42ef07a4b28beb7caf9c8dd3b03bf8 namespace=moby Jun 12 23:03:59.032047 containerd[2455]: time="2026-06-12T23:03:59.032037619Z" level=info msg="cleaning up after shim disconnected" id=f07cde9ce0fd0c3221852e8dfef8310e8b42ef07a4b28beb7caf9c8dd3b03bf8 namespace=moby Jun 12 23:03:59.032047 containerd[2455]: time="2026-06-12T23:03:59.032043691Z" level=info msg="cleaning up dead shim" id=f07cde9ce0fd0c3221852e8dfef8310e8b42ef07a4b28beb7caf9c8dd3b03bf8 namespace=moby Jun 12 23:03:59.057387 kernel: vethc86b730: renamed from eth0 Jun 12 23:03:59.057486 kernel: docker0: port 1(vethecffcf3) entered disabled state Jun 12 23:03:59.057674 systemd-networkd[2176]: vethecffcf3: Lost carrier Jun 12 23:03:59.075000 audit[9311]: NETFILTER_CFG table=raw:174 family=2 entries=1 op=nft_unregister_rule pid=9311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:59.075000 audit[9311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe1d60f40 a2=0 a3=0 items=0 ppid=2935 pid=9311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.075000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:59.082190 systemd-networkd[2176]: vethecffcf3: Link DOWN Jun 12 23:03:59.090668 kernel: docker0: port 1(vethecffcf3) entered disabled state Jun 12 23:03:59.090734 kernel: vethecffcf3 (unregistering): left allmulticast mode Jun 12 23:03:59.094642 kernel: vethecffcf3 (unregistering): left promiscuous mode Jun 12 23:03:59.098165 kernel: docker0: port 1(vethecffcf3) entered disabled state Jun 12 23:03:59.081000 audit: ANOM_PROMISCUOUS dev=vethecffcf3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:59.081000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c47d7a0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.081000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:59.106645 systemd[1]: run-docker-netns-ec322a96741b.mount: Deactivated successfully. Jun 12 23:03:59.112642 systemd[1]: var-lib-docker-overlay2-aab52f73ff3f3909d7b3e56a31fa63803ad3c997a01c8f795d2aa46d1115892a-merged.mount: Deactivated successfully. Jun 12 23:03:59.119000 audit: BPF prog-id=384 op=UNLOAD Jun 12 23:03:59.119000 audit: BPF prog-id=388 op=UNLOAD Jun 12 23:03:59.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-55-10.0.0.35:22-43.160.253.60:44046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:59.154020 systemd[1]: Started sshd@86-55-10.0.0.35:22-43.160.253.60:44046.service - OpenSSH per-connection server daemon (43.160.253.60:44046). Jun 12 23:03:59.277213 containerd[2455]: time="2026-06-12T23:03:59.277118581Z" level=info msg="connecting to shim 35cdfea8fbb737a09010bfeec81dfe3da15ed4857170194d4cd131d5c596424f" address="unix:///run/containerd/s/1c8c11e5d8ac3d0e458eeb7f817065ece3accdbc4e6e22c9c6065fcb6321d7aa" namespace=moby protocol=ttrpc version=3 Jun 12 23:03:59.293944 systemd[1]: Started docker-35cdfea8fbb737a09010bfeec81dfe3da15ed4857170194d4cd131d5c596424f.scope - libcontainer container 35cdfea8fbb737a09010bfeec81dfe3da15ed4857170194d4cd131d5c596424f. Jun 12 23:03:59.301000 audit: BPF prog-id=389 op=LOAD Jun 12 23:03:59.302000 audit: BPF prog-id=390 op=LOAD Jun 12 23:03:59.302000 audit[9344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=315a2fcabf80 a2=98 a3=0 items=0 ppid=9333 pid=9344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356364666561386662623733376130393031306266656563 Jun 12 23:03:59.302000 audit: BPF prog-id=390 op=UNLOAD Jun 12 23:03:59.302000 audit[9344]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9333 pid=9344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356364666561386662623733376130393031306266656563 Jun 12 23:03:59.302000 audit: BPF prog-id=391 op=LOAD Jun 12 23:03:59.302000 audit[9344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=315a2fcac258 a2=98 a3=0 items=0 ppid=9333 pid=9344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356364666561386662623733376130393031306266656563 Jun 12 23:03:59.302000 audit: BPF prog-id=392 op=LOAD Jun 12 23:03:59.302000 audit[9344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=315a2fcabf98 a2=98 a3=0 items=0 ppid=9333 pid=9344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356364666561386662623733376130393031306266656563 Jun 12 23:03:59.303000 audit: BPF prog-id=392 op=UNLOAD Jun 12 23:03:59.303000 audit[9344]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9333 pid=9344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356364666561386662623733376130393031306266656563 Jun 12 23:03:59.303000 audit: BPF prog-id=391 op=UNLOAD Jun 12 23:03:59.303000 audit[9344]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9333 pid=9344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356364666561386662623733376130393031306266656563 Jun 12 23:03:59.303000 audit: BPF prog-id=393 op=LOAD Jun 12 23:03:59.303000 audit[9344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=315a2fcac4a8 a2=98 a3=0 items=0 ppid=9333 pid=9344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33356364666561386662623733376130393031306266656563 Jun 12 23:03:59.322504 kernel: docker0: port 1(veth472b0ad) entered blocking state Jun 12 23:03:59.322602 kernel: docker0: port 1(veth472b0ad) entered disabled state Jun 12 23:03:59.325758 kernel: veth472b0ad: entered allmulticast mode Jun 12 23:03:59.329263 kernel: veth472b0ad: entered promiscuous mode Jun 12 23:03:59.314000 audit: ANOM_PROMISCUOUS dev=veth472b0ad prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:03:59.314000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0c750 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.314000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:03:59.331018 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:03:59.331000 audit[9366]: NETFILTER_CFG table=raw:175 family=2 entries=1 op=nft_register_rule pid=9366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:03:59.331000 audit[9366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe32a6d90 a2=0 a3=0 items=0 ppid=2935 pid=9366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:03:59.331000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:03:59.332644 systemd-networkd[2176]: veth472b0ad: Link UP Jun 12 23:03:59.354085 kernel: eth0: renamed from vethff029dd Jun 12 23:03:59.354164 kernel: docker0: port 1(veth472b0ad) entered blocking state Jun 12 23:03:59.354181 kernel: docker0: port 1(veth472b0ad) entered forwarding state Jun 12 23:03:59.354202 systemd-networkd[2176]: veth472b0ad: Gained carrier Jun 12 23:03:59.354857 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:03:59.665037 sshd[9313]: Invalid user deploy from 43.160.253.60 port 44046 Jun 12 23:03:59.826736 sshd[9313]: Connection closed by invalid user deploy 43.160.253.60 port 44046 [preauth] Jun 12 23:03:59.826000 audit[9313]: AUDIT1109 pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:59.829637 systemd[1]: sshd@86-55-10.0.0.35:22-43.160.253.60:44046.service: Deactivated successfully. Jun 12 23:03:59.831683 kernel: kauditd_printk_skb: 152 callbacks suppressed Jun 12 23:03:59.831770 kernel: audit: type=1109 audit(1781305439.826:1539): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:03:59.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-55-10.0.0.35:22-43.160.253.60:44046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:59.858657 kernel: audit: type=1131 audit(1781305439.829:1540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@86-55-10.0.0.35:22-43.160.253.60:44046 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:03:59.997762 systemd[1]: Started sshd@87-4129-10.0.0.35:22-43.160.253.60:44060.service - OpenSSH per-connection server daemon (43.160.253.60:44060). Jun 12 23:03:59.997000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-4129-10.0.0.35:22-43.160.253.60:44060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:00.013809 kernel: audit: type=1130 audit(1781305439.997:1541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-4129-10.0.0.35:22-43.160.253.60:44060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:00.379937 systemd[1]: docker-35cdfea8fbb737a09010bfeec81dfe3da15ed4857170194d4cd131d5c596424f.scope: Deactivated successfully. Jun 12 23:04:00.392159 containerd[2455]: time="2026-06-12T23:04:00.392111345Z" level=info msg="shim disconnected" id=35cdfea8fbb737a09010bfeec81dfe3da15ed4857170194d4cd131d5c596424f namespace=moby Jun 12 23:04:00.392159 containerd[2455]: time="2026-06-12T23:04:00.392139215Z" level=info msg="cleaning up after shim disconnected" id=35cdfea8fbb737a09010bfeec81dfe3da15ed4857170194d4cd131d5c596424f namespace=moby Jun 12 23:04:00.392159 containerd[2455]: time="2026-06-12T23:04:00.392144991Z" level=info msg="cleaning up dead shim" id=35cdfea8fbb737a09010bfeec81dfe3da15ed4857170194d4cd131d5c596424f namespace=moby Jun 12 23:04:00.392701 dockerd[2935]: time="2026-06-12T23:04:00.392297767Z" level=info msg="ignoring event" container=35cdfea8fbb737a09010bfeec81dfe3da15ed4857170194d4cd131d5c596424f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:00.413421 systemd-networkd[2176]: veth472b0ad: Lost carrier Jun 12 23:04:00.413815 kernel: docker0: port 1(veth472b0ad) entered disabled state Jun 12 23:04:00.416794 kernel: vethff029dd: renamed from eth0 Jun 12 23:04:00.426000 audit[9404]: NETFILTER_CFG table=raw:176 family=2 entries=1 op=nft_unregister_rule pid=9404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:00.426000 audit[9404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe802e8d0 a2=0 a3=0 items=0 ppid=2935 pid=9404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.454386 kernel: audit: type=1325 audit(1781305440.426:1542): table=raw:176 family=2 entries=1 op=nft_unregister_rule pid=9404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:00.454428 kernel: audit: type=1300 audit(1781305440.426:1542): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe802e8d0 a2=0 a3=0 items=0 ppid=2935 pid=9404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.426000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:00.466781 kernel: audit: type=1327 audit(1781305440.426:1542): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:00.467825 kernel: docker0: port 1(veth472b0ad) entered disabled state Jun 12 23:04:00.467425 systemd-networkd[2176]: veth472b0ad: Link DOWN Jun 12 23:04:00.474352 kernel: veth472b0ad (unregistering): left allmulticast mode Jun 12 23:04:00.478725 kernel: veth472b0ad (unregistering): left promiscuous mode Jun 12 23:04:00.454000 audit: ANOM_PROMISCUOUS dev=veth472b0ad prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:00.482911 kernel: docker0: port 1(veth472b0ad) entered disabled state Jun 12 23:04:00.482934 kernel: audit: type=1700 audit(1781305440.454:1543): dev=veth472b0ad prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:00.454000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe1c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.454000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:00.537326 kernel: audit: type=1300 audit(1781305440.454:1543): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe1c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.537433 kernel: audit: type=1327 audit(1781305440.454:1543): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:00.539483 systemd[1]: run-docker-netns-efd3dde2949d.mount: Deactivated successfully. Jun 12 23:04:00.541569 sshd[9378]: Invalid user ftpuser from 43.160.253.60 port 44060 Jun 12 23:04:00.543646 systemd[1]: var-lib-docker-overlay2-bb4afd5b11b23a19fdef78d48cbe73238e59c7d5a97f6eac5ffe2cf983c1103f-merged.mount: Deactivated successfully. Jun 12 23:04:00.549000 audit: BPF prog-id=389 op=UNLOAD Jun 12 23:04:00.549000 audit: BPF prog-id=393 op=UNLOAD Jun 12 23:04:00.554790 kernel: audit: type=1334 audit(1781305440.549:1544): prog-id=389 op=UNLOAD Jun 12 23:04:00.703719 sshd[9378]: Connection closed by invalid user ftpuser 43.160.253.60 port 44060 [preauth] Jun 12 23:04:00.703000 audit[9378]: AUDIT1109 pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:00.705652 systemd[1]: sshd@87-4129-10.0.0.35:22-43.160.253.60:44060.service: Deactivated successfully. Jun 12 23:04:00.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@87-4129-10.0.0.35:22-43.160.253.60:44060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:00.714185 containerd[2455]: time="2026-06-12T23:04:00.714122533Z" level=info msg="connecting to shim 34bfac48da2431a6ce84da4e77fff2514ec41b5377a9f5bfe3859c283c5dd6f5" address="unix:///run/containerd/s/4fc412acfa075b21320e8f14a5bd030a269c943d8876bc840f99d041b71b15cc" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:00.734959 systemd[1]: Started docker-34bfac48da2431a6ce84da4e77fff2514ec41b5377a9f5bfe3859c283c5dd6f5.scope - libcontainer container 34bfac48da2431a6ce84da4e77fff2514ec41b5377a9f5bfe3859c283c5dd6f5. Jun 12 23:04:00.745000 audit: BPF prog-id=394 op=LOAD Jun 12 23:04:00.746000 audit: BPF prog-id=395 op=LOAD Jun 12 23:04:00.746000 audit[9436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2a9a7463ff80 a2=98 a3=0 items=0 ppid=9424 pid=9436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346266616334386461323433316136636538346461346537 Jun 12 23:04:00.746000 audit: BPF prog-id=395 op=UNLOAD Jun 12 23:04:00.746000 audit[9436]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9424 pid=9436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346266616334386461323433316136636538346461346537 Jun 12 23:04:00.746000 audit: BPF prog-id=396 op=LOAD Jun 12 23:04:00.746000 audit[9436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2a9a74640258 a2=98 a3=0 items=0 ppid=9424 pid=9436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346266616334386461323433316136636538346461346537 Jun 12 23:04:00.746000 audit: BPF prog-id=397 op=LOAD Jun 12 23:04:00.746000 audit[9436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2a9a7463ff98 a2=98 a3=0 items=0 ppid=9424 pid=9436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346266616334386461323433316136636538346461346537 Jun 12 23:04:00.746000 audit: BPF prog-id=397 op=UNLOAD Jun 12 23:04:00.746000 audit[9436]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9424 pid=9436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346266616334386461323433316136636538346461346537 Jun 12 23:04:00.746000 audit: BPF prog-id=396 op=UNLOAD Jun 12 23:04:00.746000 audit[9436]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9424 pid=9436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346266616334386461323433316136636538346461346537 Jun 12 23:04:00.746000 audit: BPF prog-id=398 op=LOAD Jun 12 23:04:00.746000 audit[9436]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2a9a746404a8 a2=98 a3=0 items=0 ppid=9424 pid=9436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F33346266616334386461323433316136636538346461346537 Jun 12 23:04:00.766832 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:00.770687 kernel: docker0: port 1(vethee9ad62) entered blocking state Jun 12 23:04:00.770750 kernel: docker0: port 1(vethee9ad62) entered disabled state Jun 12 23:04:00.773790 kernel: vethee9ad62: entered allmulticast mode Jun 12 23:04:00.776863 kernel: vethee9ad62: entered promiscuous mode Jun 12 23:04:00.762000 audit: ANOM_PROMISCUOUS dev=vethee9ad62 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:00.762000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaa2a0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.762000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:00.778000 audit[9460]: NETFILTER_CFG table=raw:177 family=2 entries=1 op=nft_register_rule pid=9460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:00.778000 audit[9460]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe5bdf140 a2=0 a3=0 items=0 ppid=2935 pid=9460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:00.778000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:00.779876 systemd-networkd[2176]: vethee9ad62: Link UP Jun 12 23:04:00.801798 kernel: eth0: renamed from vethb989f83 Jun 12 23:04:00.801263 systemd-networkd[2176]: vethee9ad62: Gained carrier Jun 12 23:04:00.802032 kernel: docker0: port 1(vethee9ad62) entered blocking state Jun 12 23:04:00.802054 kernel: docker0: port 1(vethee9ad62) entered forwarding state Jun 12 23:04:00.802193 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:00.876356 systemd[1]: Started sshd@88-56-10.0.0.35:22-43.160.253.60:44070.service - OpenSSH per-connection server daemon (43.160.253.60:44070). Jun 12 23:04:00.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-56-10.0.0.35:22-43.160.253.60:44070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:01.387231 sshd[9469]: Invalid user centos from 43.160.253.60 port 44070 Jun 12 23:04:01.549312 sshd[9469]: Connection closed by invalid user centos 43.160.253.60 port 44070 [preauth] Jun 12 23:04:01.548000 audit[9469]: AUDIT1109 pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:01.551163 systemd[1]: sshd@88-56-10.0.0.35:22-43.160.253.60:44070.service: Deactivated successfully. Jun 12 23:04:01.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@88-56-10.0.0.35:22-43.160.253.60:44070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:01.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-57-10.0.0.35:22-43.160.253.60:44072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:01.719317 systemd[1]: Started sshd@89-57-10.0.0.35:22-43.160.253.60:44072.service - OpenSSH per-connection server daemon (43.160.253.60:44072). Jun 12 23:04:01.825564 systemd[1]: docker-34bfac48da2431a6ce84da4e77fff2514ec41b5377a9f5bfe3859c283c5dd6f5.scope: Deactivated successfully. Jun 12 23:04:01.836924 dockerd[2935]: time="2026-06-12T23:04:01.836871900Z" level=info msg="ignoring event" container=34bfac48da2431a6ce84da4e77fff2514ec41b5377a9f5bfe3859c283c5dd6f5 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:01.837445 containerd[2455]: time="2026-06-12T23:04:01.837407057Z" level=info msg="shim disconnected" id=34bfac48da2431a6ce84da4e77fff2514ec41b5377a9f5bfe3859c283c5dd6f5 namespace=moby Jun 12 23:04:01.837445 containerd[2455]: time="2026-06-12T23:04:01.837443407Z" level=info msg="cleaning up after shim disconnected" id=34bfac48da2431a6ce84da4e77fff2514ec41b5377a9f5bfe3859c283c5dd6f5 namespace=moby Jun 12 23:04:01.837633 containerd[2455]: time="2026-06-12T23:04:01.837450239Z" level=info msg="cleaning up dead shim" id=34bfac48da2431a6ce84da4e77fff2514ec41b5377a9f5bfe3859c283c5dd6f5 namespace=moby Jun 12 23:04:01.858025 systemd-networkd[2176]: vethee9ad62: Lost carrier Jun 12 23:04:01.858917 kernel: docker0: port 1(vethee9ad62) entered disabled state Jun 12 23:04:01.858942 kernel: vethb989f83: renamed from eth0 Jun 12 23:04:01.874000 audit[9500]: NETFILTER_CFG table=raw:178 family=2 entries=1 op=nft_unregister_rule pid=9500 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:01.874000 audit[9500]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdae19f00 a2=0 a3=0 items=0 ppid=2935 pid=9500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:01.874000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:01.879182 systemd-networkd[2176]: vethee9ad62: Link DOWN Jun 12 23:04:01.887051 kernel: docker0: port 1(vethee9ad62) entered disabled state Jun 12 23:04:01.887114 kernel: vethee9ad62 (unregistering): left allmulticast mode Jun 12 23:04:01.890673 kernel: vethee9ad62 (unregistering): left promiscuous mode Jun 12 23:04:01.878000 audit: ANOM_PROMISCUOUS dev=vethee9ad62 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:01.894403 kernel: docker0: port 1(vethee9ad62) entered disabled state Jun 12 23:04:01.878000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b3258a0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:01.878000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:01.907358 systemd[1]: run-docker-netns-bfc9de0ac32c.mount: Deactivated successfully. Jun 12 23:04:01.910839 systemd[1]: var-lib-docker-overlay2-c3bdbd022388b1550dee7437cb73aac90e201e889822f14edd2b5efa448e6964-merged.mount: Deactivated successfully. Jun 12 23:04:01.919000 audit: BPF prog-id=394 op=UNLOAD Jun 12 23:04:01.919000 audit: BPF prog-id=398 op=UNLOAD Jun 12 23:04:01.989366 systemd[1]: var-lib-docker-overlay2-5102471ca907f2f9c5fddc457d4f26bb9d77024a5ec3734d86d0322ce296c6de\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:02.058305 containerd[2455]: time="2026-06-12T23:04:02.058201397Z" level=info msg="connecting to shim fd48c7a34a4e9282908d458bf790e8140491d77f0c5f42811ca0424616d03d0b" address="unix:///run/containerd/s/d49d5e7311ce88f6221767a36b90bc8a16c7a3ce9106a4cf6e416a786adae9df" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:02.079942 systemd[1]: Started docker-fd48c7a34a4e9282908d458bf790e8140491d77f0c5f42811ca0424616d03d0b.scope - libcontainer container fd48c7a34a4e9282908d458bf790e8140491d77f0c5f42811ca0424616d03d0b. Jun 12 23:04:02.087000 audit: BPF prog-id=399 op=LOAD Jun 12 23:04:02.087000 audit: BPF prog-id=400 op=LOAD Jun 12 23:04:02.087000 audit[9530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=28702cb7f80 a2=98 a3=0 items=0 ppid=9518 pid=9530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:02.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66643438633761333461346539323832393038643435386266 Jun 12 23:04:02.087000 audit: BPF prog-id=400 op=UNLOAD Jun 12 23:04:02.087000 audit[9530]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9518 pid=9530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:02.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66643438633761333461346539323832393038643435386266 Jun 12 23:04:02.087000 audit: BPF prog-id=401 op=LOAD Jun 12 23:04:02.087000 audit[9530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=28702cb8258 a2=98 a3=0 items=0 ppid=9518 pid=9530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:02.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66643438633761333461346539323832393038643435386266 Jun 12 23:04:02.088000 audit: BPF prog-id=402 op=LOAD Jun 12 23:04:02.088000 audit[9530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=28702cb7f98 a2=98 a3=0 items=0 ppid=9518 pid=9530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:02.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66643438633761333461346539323832393038643435386266 Jun 12 23:04:02.088000 audit: BPF prog-id=402 op=UNLOAD Jun 12 23:04:02.088000 audit[9530]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=9518 pid=9530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:02.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66643438633761333461346539323832393038643435386266 Jun 12 23:04:02.088000 audit: BPF prog-id=401 op=UNLOAD Jun 12 23:04:02.088000 audit[9530]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9518 pid=9530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:02.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66643438633761333461346539323832393038643435386266 Jun 12 23:04:02.088000 audit: BPF prog-id=403 op=LOAD Jun 12 23:04:02.088000 audit[9530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=28702cb84a8 a2=98 a3=0 items=0 ppid=9518 pid=9530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:02.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66643438633761333461346539323832393038643435386266 Jun 12 23:04:02.106611 kernel: docker0: port 1(vethb22f9fa) entered blocking state Jun 12 23:04:02.106709 kernel: docker0: port 1(vethb22f9fa) entered disabled state Jun 12 23:04:02.109444 kernel: vethb22f9fa: entered allmulticast mode Jun 12 23:04:02.112225 kernel: vethb22f9fa: entered promiscuous mode Jun 12 23:04:02.098000 audit: ANOM_PROMISCUOUS dev=vethb22f9fa prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:02.098000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b483500 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:02.098000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:02.114081 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:02.114000 audit[9550]: NETFILTER_CFG table=raw:179 family=2 entries=1 op=nft_register_rule pid=9550 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:02.114000 audit[9550]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd5e30cd0 a2=0 a3=0 items=0 ppid=2935 pid=9550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:02.114000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:02.115623 systemd-networkd[2176]: vethb22f9fa: Link UP Jun 12 23:04:02.137007 kernel: eth0: renamed from vethf211762 Jun 12 23:04:02.137105 kernel: docker0: port 1(vethb22f9fa) entered blocking state Jun 12 23:04:02.140551 kernel: docker0: port 1(vethb22f9fa) entered forwarding state Jun 12 23:04:02.140965 systemd-networkd[2176]: vethb22f9fa: Gained carrier Jun 12 23:04:02.141669 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:02.489115 sshd[9475]: Connection closed by authenticating user root 43.160.253.60 port 44072 [preauth] Jun 12 23:04:02.488000 audit[9475]: AUDIT1109 pid=9475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:02.491135 systemd[1]: sshd@89-57-10.0.0.35:22-43.160.253.60:44072.service: Deactivated successfully. Jun 12 23:04:02.490000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@89-57-10.0.0.35:22-43.160.253.60:44072 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:02.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-58-10.0.0.35:22-43.160.253.60:44084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:02.661407 systemd[1]: Started sshd@90-58-10.0.0.35:22-43.160.253.60:44084.service - OpenSSH per-connection server daemon (43.160.253.60:44084). Jun 12 23:04:03.170027 systemd[1]: docker-fd48c7a34a4e9282908d458bf790e8140491d77f0c5f42811ca0424616d03d0b.scope: Deactivated successfully. Jun 12 23:04:03.173900 sshd[9561]: Invalid user minecraft from 43.160.253.60 port 44084 Jun 12 23:04:03.182699 dockerd[2935]: time="2026-06-12T23:04:03.182665023Z" level=info msg="ignoring event" container=fd48c7a34a4e9282908d458bf790e8140491d77f0c5f42811ca0424616d03d0b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:03.182986 containerd[2455]: time="2026-06-12T23:04:03.182688101Z" level=info msg="shim disconnected" id=fd48c7a34a4e9282908d458bf790e8140491d77f0c5f42811ca0424616d03d0b namespace=moby Jun 12 23:04:03.182986 containerd[2455]: time="2026-06-12T23:04:03.182712548Z" level=info msg="cleaning up after shim disconnected" id=fd48c7a34a4e9282908d458bf790e8140491d77f0c5f42811ca0424616d03d0b namespace=moby Jun 12 23:04:03.182986 containerd[2455]: time="2026-06-12T23:04:03.182718220Z" level=info msg="cleaning up dead shim" id=fd48c7a34a4e9282908d458bf790e8140491d77f0c5f42811ca0424616d03d0b namespace=moby Jun 12 23:04:03.207280 systemd-networkd[2176]: vethb22f9fa: Lost carrier Jun 12 23:04:03.207954 kernel: docker0: port 1(vethb22f9fa) entered disabled state Jun 12 23:04:03.211804 kernel: vethf211762: renamed from eth0 Jun 12 23:04:03.224000 audit[9587]: NETFILTER_CFG table=raw:180 family=2 entries=1 op=nft_unregister_rule pid=9587 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:03.224000 audit[9587]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc5a37960 a2=0 a3=0 items=0 ppid=2935 pid=9587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.224000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:03.232303 systemd-networkd[2176]: vethb22f9fa: Link DOWN Jun 12 23:04:03.236953 kernel: docker0: port 1(vethb22f9fa) entered disabled state Jun 12 23:04:03.231000 audit: ANOM_PROMISCUOUS dev=vethb22f9fa prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:03.245548 kernel: vethb22f9fa (unregistering): left allmulticast mode Jun 12 23:04:03.245594 kernel: vethb22f9fa (unregistering): left promiscuous mode Jun 12 23:04:03.245609 kernel: docker0: port 1(vethb22f9fa) entered disabled state Jun 12 23:04:03.231000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb0440 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.231000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:03.264397 systemd[1]: run-docker-netns-95c051c87f47.mount: Deactivated successfully. Jun 12 23:04:03.267556 systemd[1]: var-lib-docker-overlay2-5102471ca907f2f9c5fddc457d4f26bb9d77024a5ec3734d86d0322ce296c6de-merged.mount: Deactivated successfully. Jun 12 23:04:03.288000 audit: BPF prog-id=399 op=UNLOAD Jun 12 23:04:03.288000 audit: BPF prog-id=403 op=UNLOAD Jun 12 23:04:03.334896 sshd[9561]: Connection closed by invalid user minecraft 43.160.253.60 port 44084 [preauth] Jun 12 23:04:03.334000 audit[9561]: AUDIT1109 pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:03.336941 systemd[1]: sshd@90-58-10.0.0.35:22-43.160.253.60:44084.service: Deactivated successfully. Jun 12 23:04:03.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@90-58-10.0.0.35:22-43.160.253.60:44084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:03.409790 systemd[1]: var-lib-docker-overlay2-e0d9c8faf9b9dac151ff73b114dc539cfeef56bd1f4cf0720b427a5fc34afbc8\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:03.491472 containerd[2455]: time="2026-06-12T23:04:03.491431402Z" level=info msg="connecting to shim e523a80e8a011d6faf3411ea6989f4f1e09c92c19744d09aa4cb923584dc9650" address="unix:///run/containerd/s/3f318f7d157ae1ac81288432147d05ff65ffe08cf0ad347fe77516b50e826c58" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:03.505591 systemd[1]: Started docker-e523a80e8a011d6faf3411ea6989f4f1e09c92c19744d09aa4cb923584dc9650.scope - libcontainer container e523a80e8a011d6faf3411ea6989f4f1e09c92c19744d09aa4cb923584dc9650. Jun 12 23:04:03.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-59-10.0.0.35:22-43.160.253.60:44096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:03.507006 systemd[1]: Started sshd@91-59-10.0.0.35:22-43.160.253.60:44096.service - OpenSSH per-connection server daemon (43.160.253.60:44096). Jun 12 23:04:03.515000 audit: BPF prog-id=404 op=LOAD Jun 12 23:04:03.516000 audit: BPF prog-id=405 op=LOAD Jun 12 23:04:03.516000 audit[9619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=670181fc9f80 a2=98 a3=0 items=0 ppid=9606 pid=9619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65353233613830653861303131643666616633343131656136 Jun 12 23:04:03.516000 audit: BPF prog-id=405 op=UNLOAD Jun 12 23:04:03.516000 audit[9619]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9606 pid=9619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65353233613830653861303131643666616633343131656136 Jun 12 23:04:03.516000 audit: BPF prog-id=406 op=LOAD Jun 12 23:04:03.516000 audit[9619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=670181fca258 a2=98 a3=0 items=0 ppid=9606 pid=9619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65353233613830653861303131643666616633343131656136 Jun 12 23:04:03.516000 audit: BPF prog-id=407 op=LOAD Jun 12 23:04:03.516000 audit[9619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=670181fc9f98 a2=98 a3=0 items=0 ppid=9606 pid=9619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65353233613830653861303131643666616633343131656136 Jun 12 23:04:03.516000 audit: BPF prog-id=407 op=UNLOAD Jun 12 23:04:03.516000 audit[9619]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=9606 pid=9619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65353233613830653861303131643666616633343131656136 Jun 12 23:04:03.516000 audit: BPF prog-id=406 op=UNLOAD Jun 12 23:04:03.516000 audit[9619]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9606 pid=9619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65353233613830653861303131643666616633343131656136 Jun 12 23:04:03.516000 audit: BPF prog-id=408 op=LOAD Jun 12 23:04:03.516000 audit[9619]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=670181fca4a8 a2=98 a3=0 items=0 ppid=9606 pid=9619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.516000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65353233613830653861303131643666616633343131656136 Jun 12 23:04:03.532185 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:03.538815 kernel: docker0: port 1(vethdf8114b) entered blocking state Jun 12 23:04:03.538899 kernel: docker0: port 1(vethdf8114b) entered disabled state Jun 12 23:04:03.541615 kernel: vethdf8114b: entered allmulticast mode Jun 12 23:04:03.544351 kernel: vethdf8114b: entered promiscuous mode Jun 12 23:04:03.531000 audit: ANOM_PROMISCUOUS dev=vethdf8114b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:03.531000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beab0e0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.531000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:03.546000 audit[9644]: NETFILTER_CFG table=raw:181 family=2 entries=1 op=nft_register_rule pid=9644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:03.546000 audit[9644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc6efa100 a2=0 a3=0 items=0 ppid=2935 pid=9644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:03.546000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:03.547868 systemd-networkd[2176]: vethdf8114b: Link UP Jun 12 23:04:03.560790 kernel: eth0: renamed from veth7385d42 Jun 12 23:04:03.567906 kernel: docker0: port 1(vethdf8114b) entered blocking state Jun 12 23:04:03.567968 kernel: docker0: port 1(vethdf8114b) entered forwarding state Jun 12 23:04:03.568162 systemd-networkd[2176]: vethdf8114b: Gained carrier Jun 12 23:04:03.568617 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:04.018046 sshd[9632]: Invalid user ubuntu from 43.160.253.60 port 44096 Jun 12 23:04:04.181258 sshd[9632]: Connection closed by invalid user ubuntu 43.160.253.60 port 44096 [preauth] Jun 12 23:04:04.180000 audit[9632]: AUDIT1109 pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:04.183146 systemd[1]: sshd@91-59-10.0.0.35:22-43.160.253.60:44096.service: Deactivated successfully. Jun 12 23:04:04.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@91-59-10.0.0.35:22-43.160.253.60:44096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:04.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-4130-10.0.0.35:22-43.160.253.60:44104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:04.358017 systemd[1]: Started sshd@92-4130-10.0.0.35:22-43.160.253.60:44104.service - OpenSSH per-connection server daemon (43.160.253.60:44104). Jun 12 23:04:04.595959 systemd[1]: docker-e523a80e8a011d6faf3411ea6989f4f1e09c92c19744d09aa4cb923584dc9650.scope: Deactivated successfully. Jun 12 23:04:04.606472 containerd[2455]: time="2026-06-12T23:04:04.606353456Z" level=info msg="shim disconnected" id=e523a80e8a011d6faf3411ea6989f4f1e09c92c19744d09aa4cb923584dc9650 namespace=moby Jun 12 23:04:04.606472 containerd[2455]: time="2026-06-12T23:04:04.606384543Z" level=info msg="cleaning up after shim disconnected" id=e523a80e8a011d6faf3411ea6989f4f1e09c92c19744d09aa4cb923584dc9650 namespace=moby Jun 12 23:04:04.606472 containerd[2455]: time="2026-06-12T23:04:04.606390655Z" level=info msg="cleaning up dead shim" id=e523a80e8a011d6faf3411ea6989f4f1e09c92c19744d09aa4cb923584dc9650 namespace=moby Jun 12 23:04:04.606832 dockerd[2935]: time="2026-06-12T23:04:04.606429181Z" level=info msg="ignoring event" container=e523a80e8a011d6faf3411ea6989f4f1e09c92c19744d09aa4cb923584dc9650 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:04.627215 systemd-networkd[2176]: vethdf8114b: Lost carrier Jun 12 23:04:04.627983 kernel: docker0: port 1(vethdf8114b) entered disabled state Jun 12 23:04:04.630802 kernel: veth7385d42: renamed from eth0 Jun 12 23:04:04.642000 audit[9680]: NETFILTER_CFG table=raw:182 family=2 entries=1 op=nft_unregister_rule pid=9680 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:04.642000 audit[9680]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffeee0c4e0 a2=0 a3=0 items=0 ppid=2935 pid=9680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.642000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:04.646206 systemd-networkd[2176]: vethdf8114b: Link DOWN Jun 12 23:04:04.649790 kernel: docker0: port 1(vethdf8114b) entered disabled state Jun 12 23:04:04.657093 kernel: vethdf8114b (unregistering): left allmulticast mode Jun 12 23:04:04.657150 kernel: vethdf8114b (unregistering): left promiscuous mode Jun 12 23:04:04.645000 audit: ANOM_PROMISCUOUS dev=vethdf8114b prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:04.661312 kernel: docker0: port 1(vethdf8114b) entered disabled state Jun 12 23:04:04.645000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f68e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.645000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:04.672793 systemd[1]: run-docker-netns-0ff72cd4b6f1.mount: Deactivated successfully. Jun 12 23:04:04.676863 systemd[1]: var-lib-docker-overlay2-e0d9c8faf9b9dac151ff73b114dc539cfeef56bd1f4cf0720b427a5fc34afbc8-merged.mount: Deactivated successfully. Jun 12 23:04:04.688000 audit: BPF prog-id=404 op=UNLOAD Jun 12 23:04:04.688000 audit: BPF prog-id=408 op=UNLOAD Jun 12 23:04:04.852259 containerd[2455]: time="2026-06-12T23:04:04.852215185Z" level=info msg="connecting to shim 74433860680f8bfa25ad55db00b2f8ff5214494ab53f474dab5d29db1e2e4d3e" address="unix:///run/containerd/s/93927164824516f3dbf87ee5f5c339f5c414b2c17f6b9509886673ad098b575d" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:04.870967 systemd[1]: Started docker-74433860680f8bfa25ad55db00b2f8ff5214494ab53f474dab5d29db1e2e4d3e.scope - libcontainer container 74433860680f8bfa25ad55db00b2f8ff5214494ab53f474dab5d29db1e2e4d3e. Jun 12 23:04:04.873028 sshd[9656]: Invalid user user2 from 43.160.253.60 port 44104 Jun 12 23:04:04.880000 audit: BPF prog-id=409 op=LOAD Jun 12 23:04:04.889193 kernel: kauditd_printk_skb: 124 callbacks suppressed Jun 12 23:04:04.889246 kernel: audit: type=1334 audit(1781305444.880:1603): prog-id=409 op=LOAD Jun 12 23:04:04.880000 audit: BPF prog-id=410 op=LOAD Jun 12 23:04:04.893184 kernel: audit: type=1334 audit(1781305444.880:1604): prog-id=410 op=LOAD Jun 12 23:04:04.880000 audit[9709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=23f4cbbe3f80 a2=98 a3=0 items=0 ppid=9697 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.910159 kernel: audit: type=1300 audit(1781305444.880:1604): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=23f4cbbe3f80 a2=98 a3=0 items=0 ppid=9697 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.880000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343433333836303638306638626661323561643535646230 Jun 12 23:04:04.926578 kernel: audit: type=1327 audit(1781305444.880:1604): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343433333836303638306638626661323561643535646230 Jun 12 23:04:04.884000 audit: BPF prog-id=410 op=UNLOAD Jun 12 23:04:04.928904 kernel: audit: type=1334 audit(1781305444.884:1605): prog-id=410 op=UNLOAD Jun 12 23:04:04.884000 audit[9709]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9697 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.946998 kernel: audit: type=1300 audit(1781305444.884:1605): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9697 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343433333836303638306638626661323561643535646230 Jun 12 23:04:04.962693 kernel: audit: type=1327 audit(1781305444.884:1605): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343433333836303638306638626661323561643535646230 Jun 12 23:04:04.884000 audit: BPF prog-id=411 op=LOAD Jun 12 23:04:04.967376 kernel: audit: type=1334 audit(1781305444.884:1606): prog-id=411 op=LOAD Jun 12 23:04:04.884000 audit[9709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=23f4cbbe4258 a2=98 a3=0 items=0 ppid=9697 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.984030 kernel: audit: type=1300 audit(1781305444.884:1606): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=23f4cbbe4258 a2=98 a3=0 items=0 ppid=9697 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343433333836303638306638626661323561643535646230 Jun 12 23:04:05.000855 kernel: audit: type=1327 audit(1781305444.884:1606): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343433333836303638306638626661323561643535646230 Jun 12 23:04:04.888000 audit: BPF prog-id=412 op=LOAD Jun 12 23:04:04.888000 audit[9709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=23f4cbbe3f98 a2=98 a3=0 items=0 ppid=9697 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343433333836303638306638626661323561643535646230 Jun 12 23:04:04.888000 audit: BPF prog-id=412 op=UNLOAD Jun 12 23:04:04.888000 audit[9709]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9697 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343433333836303638306638626661323561643535646230 Jun 12 23:04:04.888000 audit: BPF prog-id=411 op=UNLOAD Jun 12 23:04:04.888000 audit[9709]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9697 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343433333836303638306638626661323561643535646230 Jun 12 23:04:04.888000 audit: BPF prog-id=413 op=LOAD Jun 12 23:04:04.888000 audit[9709]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=23f4cbbe44a8 a2=98 a3=0 items=0 ppid=9697 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:04.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37343433333836303638306638626661323561643535646230 Jun 12 23:04:05.015751 kernel: docker0: port 1(veth8393d92) entered blocking state Jun 12 23:04:05.015850 kernel: docker0: port 1(veth8393d92) entered disabled state Jun 12 23:04:05.018880 kernel: veth8393d92: entered allmulticast mode Jun 12 23:04:05.021788 kernel: veth8393d92: entered promiscuous mode Jun 12 23:04:05.007000 audit: ANOM_PROMISCUOUS dev=veth8393d92 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:05.022310 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:05.007000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52fa10 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:05.007000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:05.023000 audit[9730]: NETFILTER_CFG table=raw:183 family=2 entries=1 op=nft_register_rule pid=9730 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:05.023000 audit[9730]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe7cf20d0 a2=0 a3=0 items=0 ppid=2935 pid=9730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:05.023000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:05.025294 systemd-networkd[2176]: veth8393d92: Link UP Jun 12 23:04:05.034760 sshd[9656]: Connection closed by invalid user user2 43.160.253.60 port 44104 [preauth] Jun 12 23:04:05.034000 audit[9656]: AUDIT1109 pid=9656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:05.036841 systemd[1]: sshd@92-4130-10.0.0.35:22-43.160.253.60:44104.service: Deactivated successfully. Jun 12 23:04:05.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@92-4130-10.0.0.35:22-43.160.253.60:44104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:05.049948 kernel: eth0: renamed from veth14e24d6 Jun 12 23:04:05.049802 systemd-networkd[2176]: veth8393d92: Gained carrier Jun 12 23:04:05.050109 kernel: docker0: port 1(veth8393d92) entered blocking state Jun 12 23:04:05.050125 kernel: docker0: port 1(veth8393d92) entered forwarding state Jun 12 23:04:05.050569 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:05.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-4131-10.0.0.35:22-43.160.253.60:44120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:05.209677 systemd[1]: Started sshd@93-4131-10.0.0.35:22-43.160.253.60:44120.service - OpenSSH per-connection server daemon (43.160.253.60:44120). Jun 12 23:04:05.725494 sshd[9742]: Invalid user solr from 43.160.253.60 port 44120 Jun 12 23:04:05.887196 sshd[9742]: Connection closed by invalid user solr 43.160.253.60 port 44120 [preauth] Jun 12 23:04:05.886000 audit[9742]: AUDIT1109 pid=9742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:05.889121 systemd[1]: sshd@93-4131-10.0.0.35:22-43.160.253.60:44120.service: Deactivated successfully. Jun 12 23:04:05.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@93-4131-10.0.0.35:22-43.160.253.60:44120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:06.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-4132-10.0.0.35:22-43.160.253.60:52446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:06.058027 systemd[1]: Started sshd@94-4132-10.0.0.35:22-43.160.253.60:52446.service - OpenSSH per-connection server daemon (43.160.253.60:52446). Jun 12 23:04:06.078071 systemd[1]: docker-74433860680f8bfa25ad55db00b2f8ff5214494ab53f474dab5d29db1e2e4d3e.scope: Deactivated successfully. Jun 12 23:04:06.092641 dockerd[2935]: time="2026-06-12T23:04:06.092410187Z" level=info msg="ignoring event" container=74433860680f8bfa25ad55db00b2f8ff5214494ab53f474dab5d29db1e2e4d3e module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:06.093418 containerd[2455]: time="2026-06-12T23:04:06.093136031Z" level=info msg="shim disconnected" id=74433860680f8bfa25ad55db00b2f8ff5214494ab53f474dab5d29db1e2e4d3e namespace=moby Jun 12 23:04:06.093418 containerd[2455]: time="2026-06-12T23:04:06.093174733Z" level=info msg="cleaning up after shim disconnected" id=74433860680f8bfa25ad55db00b2f8ff5214494ab53f474dab5d29db1e2e4d3e namespace=moby Jun 12 23:04:06.093418 containerd[2455]: time="2026-06-12T23:04:06.093183644Z" level=info msg="cleaning up dead shim" id=74433860680f8bfa25ad55db00b2f8ff5214494ab53f474dab5d29db1e2e4d3e namespace=moby Jun 12 23:04:06.112892 kernel: docker0: port 1(veth8393d92) entered disabled state Jun 12 23:04:06.112803 systemd-networkd[2176]: veth8393d92: Lost carrier Jun 12 23:04:06.113590 kernel: veth14e24d6: renamed from eth0 Jun 12 23:04:06.133000 audit[9774]: NETFILTER_CFG table=raw:184 family=2 entries=1 op=nft_unregister_rule pid=9774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:06.133000 audit[9774]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc8352240 a2=0 a3=0 items=0 ppid=2935 pid=9774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.133000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:06.139276 systemd-networkd[2176]: veth8393d92: Link DOWN Jun 12 23:04:06.147596 kernel: docker0: port 1(veth8393d92) entered disabled state Jun 12 23:04:06.147667 kernel: veth8393d92 (unregistering): left allmulticast mode Jun 12 23:04:06.151202 kernel: veth8393d92 (unregistering): left promiscuous mode Jun 12 23:04:06.138000 audit: ANOM_PROMISCUOUS dev=veth8393d92 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:06.155041 kernel: docker0: port 1(veth8393d92) entered disabled state Jun 12 23:04:06.138000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8dbf40 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.138000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:06.162334 systemd[1]: run-docker-netns-69e139d228a5.mount: Deactivated successfully. Jun 12 23:04:06.165685 systemd[1]: var-lib-docker-overlay2-268fc4106690984ef2723a83b4cf6bec1050a3d7112a9ae4313de144ca6231a0-merged.mount: Deactivated successfully. Jun 12 23:04:06.171000 audit: BPF prog-id=409 op=UNLOAD Jun 12 23:04:06.171000 audit: BPF prog-id=413 op=UNLOAD Jun 12 23:04:06.259350 systemd[1]: var-lib-docker-overlay2-968c79355000568081410214667f4ac3cae4ae74689a519957d10e085159a433\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:06.323312 containerd[2455]: time="2026-06-12T23:04:06.323170804Z" level=info msg="connecting to shim 551200bd482cb6a3c424a59c69088829542f2827117d29473fa79d307843952a" address="unix:///run/containerd/s/2e232ace455d4c3005f3c9c8a7c990602d3399b712630b97275e66d04d10cc8d" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:06.345954 systemd[1]: Started docker-551200bd482cb6a3c424a59c69088829542f2827117d29473fa79d307843952a.scope - libcontainer container 551200bd482cb6a3c424a59c69088829542f2827117d29473fa79d307843952a. Jun 12 23:04:06.353000 audit: BPF prog-id=414 op=LOAD Jun 12 23:04:06.353000 audit: BPF prog-id=415 op=LOAD Jun 12 23:04:06.353000 audit[9802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=971230bdf80 a2=98 a3=0 items=0 ppid=9791 pid=9802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35353132303062643438326362366133633432346135396336 Jun 12 23:04:06.353000 audit: BPF prog-id=415 op=UNLOAD Jun 12 23:04:06.353000 audit[9802]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9791 pid=9802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35353132303062643438326362366133633432346135396336 Jun 12 23:04:06.353000 audit: BPF prog-id=416 op=LOAD Jun 12 23:04:06.353000 audit[9802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=971230be258 a2=98 a3=0 items=0 ppid=9791 pid=9802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35353132303062643438326362366133633432346135396336 Jun 12 23:04:06.353000 audit: BPF prog-id=417 op=LOAD Jun 12 23:04:06.353000 audit[9802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=971230bdf98 a2=98 a3=0 items=0 ppid=9791 pid=9802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35353132303062643438326362366133633432346135396336 Jun 12 23:04:06.353000 audit: BPF prog-id=417 op=UNLOAD Jun 12 23:04:06.353000 audit[9802]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=9791 pid=9802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35353132303062643438326362366133633432346135396336 Jun 12 23:04:06.353000 audit: BPF prog-id=416 op=UNLOAD Jun 12 23:04:06.353000 audit[9802]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=9791 pid=9802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35353132303062643438326362366133633432346135396336 Jun 12 23:04:06.353000 audit: BPF prog-id=418 op=LOAD Jun 12 23:04:06.353000 audit[9802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=971230be4a8 a2=98 a3=0 items=0 ppid=9791 pid=9802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35353132303062643438326362366133633432346135396336 Jun 12 23:04:06.367422 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:06.375284 kernel: docker0: port 1(vethdfda732) entered blocking state Jun 12 23:04:06.375346 kernel: docker0: port 1(vethdfda732) entered disabled state Jun 12 23:04:06.378303 kernel: vethdfda732: entered allmulticast mode Jun 12 23:04:06.381248 kernel: vethdfda732: entered promiscuous mode Jun 12 23:04:06.366000 audit: ANOM_PROMISCUOUS dev=vethdfda732 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:06.366000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b945650 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.366000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:06.383000 audit[9822]: NETFILTER_CFG table=raw:185 family=2 entries=1 op=nft_register_rule pid=9822 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:06.383000 audit[9822]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff24e2500 a2=0 a3=0 items=0 ppid=2935 pid=9822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:06.383000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:06.385063 systemd-networkd[2176]: vethdfda732: Link UP Jun 12 23:04:06.399807 kernel: eth0: renamed from veth612083b Jun 12 23:04:06.403863 kernel: docker0: port 1(vethdfda732) entered blocking state Jun 12 23:04:06.403887 kernel: docker0: port 1(vethdfda732) entered forwarding state Jun 12 23:04:06.407426 systemd-networkd[2176]: vethdfda732: Gained carrier Jun 12 23:04:06.407844 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:06.575421 sshd[9748]: Invalid user postgres from 43.160.253.60 port 52446 Jun 12 23:04:06.736737 sshd[9748]: Connection closed by invalid user postgres 43.160.253.60 port 52446 [preauth] Jun 12 23:04:06.736000 audit[9748]: AUDIT1109 pid=9748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:06.738594 systemd[1]: sshd@94-4132-10.0.0.35:22-43.160.253.60:52446.service: Deactivated successfully. Jun 12 23:04:06.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@94-4132-10.0.0.35:22-43.160.253.60:52446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:06.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-60-10.0.0.35:22-43.160.253.60:52460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:06.909024 systemd[1]: Started sshd@95-60-10.0.0.35:22-43.160.253.60:52460.service - OpenSSH per-connection server daemon (43.160.253.60:52460). Jun 12 23:04:07.434216 systemd[1]: docker-551200bd482cb6a3c424a59c69088829542f2827117d29473fa79d307843952a.scope: Deactivated successfully. Jun 12 23:04:07.446713 dockerd[2935]: time="2026-06-12T23:04:07.446668499Z" level=info msg="ignoring event" container=551200bd482cb6a3c424a59c69088829542f2827117d29473fa79d307843952a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:07.447212 containerd[2455]: time="2026-06-12T23:04:07.446935870Z" level=info msg="shim disconnected" id=551200bd482cb6a3c424a59c69088829542f2827117d29473fa79d307843952a namespace=moby Jun 12 23:04:07.447212 containerd[2455]: time="2026-06-12T23:04:07.446959893Z" level=info msg="cleaning up after shim disconnected" id=551200bd482cb6a3c424a59c69088829542f2827117d29473fa79d307843952a namespace=moby Jun 12 23:04:07.447212 containerd[2455]: time="2026-06-12T23:04:07.446965796Z" level=info msg="cleaning up dead shim" id=551200bd482cb6a3c424a59c69088829542f2827117d29473fa79d307843952a namespace=moby Jun 12 23:04:07.468288 systemd-networkd[2176]: vethdfda732: Lost carrier Jun 12 23:04:07.469108 kernel: docker0: port 1(vethdfda732) entered disabled state Jun 12 23:04:07.472791 kernel: veth612083b: renamed from eth0 Jun 12 23:04:07.486000 audit[9858]: NETFILTER_CFG table=raw:186 family=2 entries=1 op=nft_unregister_rule pid=9858 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:07.486000 audit[9858]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff6069df0 a2=0 a3=0 items=0 ppid=2935 pid=9858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.486000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:07.493249 systemd-networkd[2176]: vethdfda732: Link DOWN Jun 12 23:04:07.500614 kernel: docker0: port 1(vethdfda732) entered disabled state Jun 12 23:04:07.500679 kernel: vethdfda732 (unregistering): left allmulticast mode Jun 12 23:04:07.504143 kernel: vethdfda732 (unregistering): left promiscuous mode Jun 12 23:04:07.492000 audit: ANOM_PROMISCUOUS dev=vethdfda732 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:07.508610 kernel: docker0: port 1(vethdfda732) entered disabled state Jun 12 23:04:07.492000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c47c940 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.492000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:07.518761 systemd[1]: run-docker-netns-2909e8bf41e8.mount: Deactivated successfully. Jun 12 23:04:07.522390 systemd[1]: var-lib-docker-overlay2-968c79355000568081410214667f4ac3cae4ae74689a519957d10e085159a433-merged.mount: Deactivated successfully. Jun 12 23:04:07.537000 audit: BPF prog-id=414 op=UNLOAD Jun 12 23:04:07.537000 audit: BPF prog-id=418 op=UNLOAD Jun 12 23:04:07.580647 sshd[9833]: Connection closed by authenticating user docker 43.160.253.60 port 52460 [preauth] Jun 12 23:04:07.580000 audit[9833]: AUDIT1109 pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:07.582463 systemd[1]: sshd@95-60-10.0.0.35:22-43.160.253.60:52460.service: Deactivated successfully. Jun 12 23:04:07.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@95-60-10.0.0.35:22-43.160.253.60:52460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:07.593972 systemd[1]: var-lib-docker-overlay2-b64f6b2d335591c4bf356d4d958a8c5fb406c7ad181c89a566b894a6bba0bac6\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:07.658485 containerd[2455]: time="2026-06-12T23:04:07.658419924Z" level=info msg="connecting to shim cb8d75dde599b4c0540dfccbfdd8c14ba13eb19082e64689ea1d3d1e5c0beba1" address="unix:///run/containerd/s/af192857649b38cff101ab8f45d6758a5ed17dc383838986a7304d4be252ca8e" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:07.679141 systemd[1]: Started docker-cb8d75dde599b4c0540dfccbfdd8c14ba13eb19082e64689ea1d3d1e5c0beba1.scope - libcontainer container cb8d75dde599b4c0540dfccbfdd8c14ba13eb19082e64689ea1d3d1e5c0beba1. Jun 12 23:04:07.687000 audit: BPF prog-id=419 op=LOAD Jun 12 23:04:07.688000 audit: BPF prog-id=420 op=LOAD Jun 12 23:04:07.688000 audit[9889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2d3b1dd0df80 a2=98 a3=0 items=0 ppid=9877 pid=9889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623864373564646535393962346330353430646663636266 Jun 12 23:04:07.688000 audit: BPF prog-id=420 op=UNLOAD Jun 12 23:04:07.688000 audit[9889]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9877 pid=9889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623864373564646535393962346330353430646663636266 Jun 12 23:04:07.688000 audit: BPF prog-id=421 op=LOAD Jun 12 23:04:07.688000 audit[9889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2d3b1dd0e258 a2=98 a3=0 items=0 ppid=9877 pid=9889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623864373564646535393962346330353430646663636266 Jun 12 23:04:07.688000 audit: BPF prog-id=422 op=LOAD Jun 12 23:04:07.688000 audit[9889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2d3b1dd0df98 a2=98 a3=0 items=0 ppid=9877 pid=9889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623864373564646535393962346330353430646663636266 Jun 12 23:04:07.688000 audit: BPF prog-id=422 op=UNLOAD Jun 12 23:04:07.688000 audit[9889]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9877 pid=9889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623864373564646535393962346330353430646663636266 Jun 12 23:04:07.688000 audit: BPF prog-id=421 op=UNLOAD Jun 12 23:04:07.688000 audit[9889]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9877 pid=9889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.688000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623864373564646535393962346330353430646663636266 Jun 12 23:04:07.689000 audit: BPF prog-id=423 op=LOAD Jun 12 23:04:07.689000 audit[9889]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2d3b1dd0e4a8 a2=98 a3=0 items=0 ppid=9877 pid=9889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623864373564646535393962346330353430646663636266 Jun 12 23:04:07.700633 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:07.708456 kernel: docker0: port 1(veth3f05682) entered blocking state Jun 12 23:04:07.708542 kernel: docker0: port 1(veth3f05682) entered disabled state Jun 12 23:04:07.712065 kernel: veth3f05682: entered allmulticast mode Jun 12 23:04:07.715160 kernel: veth3f05682: entered promiscuous mode Jun 12 23:04:07.699000 audit: ANOM_PROMISCUOUS dev=veth3f05682 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:07.699000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f9380 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.699000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:07.717000 audit[9910]: NETFILTER_CFG table=raw:187 family=2 entries=1 op=nft_register_rule pid=9910 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:07.717000 audit[9910]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd7d65f10 a2=0 a3=0 items=0 ppid=2935 pid=9910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:07.717000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:07.719652 systemd-networkd[2176]: veth3f05682: Link UP Jun 12 23:04:07.732799 kernel: eth0: renamed from veth1479c21 Jun 12 23:04:07.740717 kernel: docker0: port 1(veth3f05682) entered blocking state Jun 12 23:04:07.740774 kernel: docker0: port 1(veth3f05682) entered forwarding state Jun 12 23:04:07.740742 systemd-networkd[2176]: veth3f05682: Gained carrier Jun 12 23:04:07.741295 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:07.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-4133-10.0.0.35:22-43.160.253.60:52464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:07.755201 systemd[1]: Started sshd@96-4133-10.0.0.35:22-43.160.253.60:52464.service - OpenSSH per-connection server daemon (43.160.253.60:52464). Jun 12 23:04:08.265948 sshd[9912]: Invalid user deploy from 43.160.253.60 port 52464 Jun 12 23:04:08.427846 sshd[9912]: Connection closed by invalid user deploy 43.160.253.60 port 52464 [preauth] Jun 12 23:04:08.427000 audit[9912]: AUDIT1109 pid=9912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:08.429371 systemd[1]: sshd@96-4133-10.0.0.35:22-43.160.253.60:52464.service: Deactivated successfully. Jun 12 23:04:08.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@96-4133-10.0.0.35:22-43.160.253.60:52464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:08.599378 systemd[1]: Started sshd@97-4134-10.0.0.35:22-43.160.253.60:52470.service - OpenSSH per-connection server daemon (43.160.253.60:52470). Jun 12 23:04:08.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-4134-10.0.0.35:22-43.160.253.60:52470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:08.774868 systemd[1]: docker-cb8d75dde599b4c0540dfccbfdd8c14ba13eb19082e64689ea1d3d1e5c0beba1.scope: Deactivated successfully. Jun 12 23:04:08.788061 dockerd[2935]: time="2026-06-12T23:04:08.788020293Z" level=info msg="ignoring event" container=cb8d75dde599b4c0540dfccbfdd8c14ba13eb19082e64689ea1d3d1e5c0beba1 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:08.788650 containerd[2455]: time="2026-06-12T23:04:08.788402186Z" level=info msg="shim disconnected" id=cb8d75dde599b4c0540dfccbfdd8c14ba13eb19082e64689ea1d3d1e5c0beba1 namespace=moby Jun 12 23:04:08.788650 containerd[2455]: time="2026-06-12T23:04:08.788429560Z" level=info msg="cleaning up after shim disconnected" id=cb8d75dde599b4c0540dfccbfdd8c14ba13eb19082e64689ea1d3d1e5c0beba1 namespace=moby Jun 12 23:04:08.788650 containerd[2455]: time="2026-06-12T23:04:08.788435304Z" level=info msg="cleaning up dead shim" id=cb8d75dde599b4c0540dfccbfdd8c14ba13eb19082e64689ea1d3d1e5c0beba1 namespace=moby Jun 12 23:04:08.811901 kernel: veth1479c21: renamed from eth0 Jun 12 23:04:08.811979 kernel: docker0: port 1(veth3f05682) entered disabled state Jun 12 23:04:08.812107 systemd-networkd[2176]: veth3f05682: Lost carrier Jun 12 23:04:08.828000 audit[9952]: NETFILTER_CFG table=raw:188 family=2 entries=1 op=nft_unregister_rule pid=9952 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:08.828000 audit[9952]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd3026d00 a2=0 a3=0 items=0 ppid=2935 pid=9952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:08.828000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:08.838201 systemd-networkd[2176]: veth3f05682: Link DOWN Jun 12 23:04:08.842801 kernel: docker0: port 1(veth3f05682) entered disabled state Jun 12 23:04:08.850883 kernel: veth3f05682 (unregistering): left allmulticast mode Jun 12 23:04:08.850932 kernel: veth3f05682 (unregistering): left promiscuous mode Jun 12 23:04:08.837000 audit: ANOM_PROMISCUOUS dev=veth3f05682 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:08.854469 kernel: docker0: port 1(veth3f05682) entered disabled state Jun 12 23:04:08.837000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c47d420 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:08.837000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:08.866125 systemd[1]: run-docker-netns-e875fbea7596.mount: Deactivated successfully. Jun 12 23:04:08.870960 systemd[1]: var-lib-docker-overlay2-b64f6b2d335591c4bf356d4d958a8c5fb406c7ad181c89a566b894a6bba0bac6-merged.mount: Deactivated successfully. Jun 12 23:04:08.880000 audit: BPF prog-id=419 op=UNLOAD Jun 12 23:04:08.880000 audit: BPF prog-id=423 op=UNLOAD Jun 12 23:04:08.936732 systemd[1]: var-lib-docker-overlay2-8582de7a307d01bdbc1f289f420f6c3a2dcca4b70995f164b185ce981c4e6d9d\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:09.011218 containerd[2455]: time="2026-06-12T23:04:09.011182124Z" level=info msg="connecting to shim d868722da136a09714e375a72e01218afd9c4153e3f2e87454095d790cbcf5e4" address="unix:///run/containerd/s/3cef1ed8f7ff878c26379af1f3fc757b9b1cb4e07a742c7a224a29c84c3bb07f" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:09.030928 systemd[1]: Started docker-d868722da136a09714e375a72e01218afd9c4153e3f2e87454095d790cbcf5e4.scope - libcontainer container d868722da136a09714e375a72e01218afd9c4153e3f2e87454095d790cbcf5e4. Jun 12 23:04:09.037000 audit: BPF prog-id=424 op=LOAD Jun 12 23:04:09.038000 audit: BPF prog-id=425 op=LOAD Jun 12 23:04:09.038000 audit[9980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=653ee00b7f80 a2=98 a3=0 items=0 ppid=9969 pid=9980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:09.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383638373232646131333661303937313465333735613732 Jun 12 23:04:09.038000 audit: BPF prog-id=425 op=UNLOAD Jun 12 23:04:09.038000 audit[9980]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9969 pid=9980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:09.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383638373232646131333661303937313465333735613732 Jun 12 23:04:09.038000 audit: BPF prog-id=426 op=LOAD Jun 12 23:04:09.038000 audit[9980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=653ee00b8258 a2=98 a3=0 items=0 ppid=9969 pid=9980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:09.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383638373232646131333661303937313465333735613732 Jun 12 23:04:09.038000 audit: BPF prog-id=427 op=LOAD Jun 12 23:04:09.038000 audit[9980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=653ee00b7f98 a2=98 a3=0 items=0 ppid=9969 pid=9980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:09.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383638373232646131333661303937313465333735613732 Jun 12 23:04:09.038000 audit: BPF prog-id=427 op=UNLOAD Jun 12 23:04:09.038000 audit[9980]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=9969 pid=9980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:09.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383638373232646131333661303937313465333735613732 Jun 12 23:04:09.038000 audit: BPF prog-id=426 op=UNLOAD Jun 12 23:04:09.038000 audit[9980]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=9969 pid=9980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:09.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383638373232646131333661303937313465333735613732 Jun 12 23:04:09.038000 audit: BPF prog-id=428 op=LOAD Jun 12 23:04:09.038000 audit[9980]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=653ee00b84a8 a2=98 a3=0 items=0 ppid=9969 pid=9980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:09.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64383638373232646131333661303937313465333735613732 Jun 12 23:04:09.058331 kernel: docker0: port 1(veth39cea3e) entered blocking state Jun 12 23:04:09.058416 kernel: docker0: port 1(veth39cea3e) entered disabled state Jun 12 23:04:09.061297 kernel: veth39cea3e: entered allmulticast mode Jun 12 23:04:09.064176 kernel: veth39cea3e: entered promiscuous mode Jun 12 23:04:09.049000 audit: ANOM_PROMISCUOUS dev=veth39cea3e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:09.064748 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:09.049000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0d5c0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:09.049000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:09.066000 audit[10001]: NETFILTER_CFG table=raw:189 family=2 entries=1 op=nft_register_rule pid=10001 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:09.066000 audit[10001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd1e71e90 a2=0 a3=0 items=0 ppid=2935 pid=10001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:09.066000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:09.068237 systemd-networkd[2176]: veth39cea3e: Link UP Jun 12 23:04:09.081800 kernel: eth0: renamed from veth568dffa Jun 12 23:04:09.089305 kernel: docker0: port 1(veth39cea3e) entered blocking state Jun 12 23:04:09.089375 kernel: docker0: port 1(veth39cea3e) entered forwarding state Jun 12 23:04:09.089345 systemd-networkd[2176]: veth39cea3e: Gained carrier Jun 12 23:04:09.089968 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:09.273857 sshd[9925]: Connection closed by authenticating user root 43.160.253.60 port 52470 [preauth] Jun 12 23:04:09.273000 audit[9925]: AUDIT1109 pid=9925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:09.275355 systemd[1]: sshd@97-4134-10.0.0.35:22-43.160.253.60:52470.service: Deactivated successfully. Jun 12 23:04:09.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@97-4134-10.0.0.35:22-43.160.253.60:52470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:09.444704 systemd[1]: Started sshd@98-61-10.0.0.35:22-43.160.253.60:52476.service - OpenSSH per-connection server daemon (43.160.253.60:52476). Jun 12 23:04:09.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-61-10.0.0.35:22-43.160.253.60:52476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:09.953423 sshd[10012]: Invalid user hadoop from 43.160.253.60 port 52476 Jun 12 23:04:10.115047 sshd[10012]: Connection closed by invalid user hadoop 43.160.253.60 port 52476 [preauth] Jun 12 23:04:10.115000 audit[10012]: AUDIT1109 pid=10012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:10.120063 systemd[1]: sshd@98-61-10.0.0.35:22-43.160.253.60:52476.service: Deactivated successfully. Jun 12 23:04:10.122602 kernel: kauditd_printk_skb: 144 callbacks suppressed Jun 12 23:04:10.122663 kernel: audit: type=1109 audit(1781305450.115:1673): pid=10012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:10.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-61-10.0.0.35:22-43.160.253.60:52476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:10.133621 systemd[1]: docker-d868722da136a09714e375a72e01218afd9c4153e3f2e87454095d790cbcf5e4.scope: Deactivated successfully. Jun 12 23:04:10.134715 kernel: audit: type=1131 audit(1781305450.118:1674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@98-61-10.0.0.35:22-43.160.253.60:52476 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:10.156815 dockerd[2935]: time="2026-06-12T23:04:10.156724763Z" level=info msg="ignoring event" container=d868722da136a09714e375a72e01218afd9c4153e3f2e87454095d790cbcf5e4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:10.157805 containerd[2455]: time="2026-06-12T23:04:10.157688752Z" level=info msg="shim disconnected" id=d868722da136a09714e375a72e01218afd9c4153e3f2e87454095d790cbcf5e4 namespace=moby Jun 12 23:04:10.157805 containerd[2455]: time="2026-06-12T23:04:10.157719054Z" level=info msg="cleaning up after shim disconnected" id=d868722da136a09714e375a72e01218afd9c4153e3f2e87454095d790cbcf5e4 namespace=moby Jun 12 23:04:10.157805 containerd[2455]: time="2026-06-12T23:04:10.157725446Z" level=info msg="cleaning up dead shim" id=d868722da136a09714e375a72e01218afd9c4153e3f2e87454095d790cbcf5e4 namespace=moby Jun 12 23:04:10.179799 kernel: docker0: port 1(veth39cea3e) entered disabled state Jun 12 23:04:10.179828 systemd-networkd[2176]: veth39cea3e: Lost carrier Jun 12 23:04:10.182808 kernel: veth568dffa: renamed from eth0 Jun 12 23:04:10.199000 audit[10040]: NETFILTER_CFG table=raw:190 family=2 entries=1 op=nft_unregister_rule pid=10040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:10.199000 audit[10040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffd0a1ac0 a2=0 a3=0 items=0 ppid=2935 pid=10040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.227658 kernel: audit: type=1325 audit(1781305450.199:1675): table=raw:190 family=2 entries=1 op=nft_unregister_rule pid=10040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:10.227706 kernel: audit: type=1300 audit(1781305450.199:1675): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffd0a1ac0 a2=0 a3=0 items=0 ppid=2935 pid=10040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.199000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:10.239734 kernel: audit: type=1327 audit(1781305450.199:1675): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:10.243892 kernel: docker0: port 1(veth39cea3e) entered disabled state Jun 12 23:04:10.240395 systemd-networkd[2176]: veth39cea3e: Link DOWN Jun 12 23:04:10.252283 kernel: veth39cea3e (unregistering): left allmulticast mode Jun 12 23:04:10.252348 kernel: veth39cea3e (unregistering): left promiscuous mode Jun 12 23:04:10.227000 audit: ANOM_PROMISCUOUS dev=veth39cea3e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:10.258879 kernel: docker0: port 1(veth39cea3e) entered disabled state Jun 12 23:04:10.258905 kernel: audit: type=1700 audit(1781305450.227:1676): dev=veth39cea3e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:10.227000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c47c260 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.227000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:10.304822 kernel: audit: type=1300 audit(1781305450.227:1676): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c47c260 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.304921 kernel: audit: type=1327 audit(1781305450.227:1676): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:10.311333 systemd[1]: run-docker-netns-cb0005aaa279.mount: Deactivated successfully. Jun 12 23:04:10.312929 systemd[1]: var-lib-docker-overlay2-8582de7a307d01bdbc1f289f420f6c3a2dcca4b70995f164b185ce981c4e6d9d-merged.mount: Deactivated successfully. Jun 12 23:04:10.314517 systemd[1]: Started sshd@99-4135-10.0.0.35:22-43.160.253.60:52490.service - OpenSSH per-connection server daemon (43.160.253.60:52490). Jun 12 23:04:10.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-4135-10.0.0.35:22-43.160.253.60:52490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:10.330809 kernel: audit: type=1130 audit(1781305450.314:1677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-4135-10.0.0.35:22-43.160.253.60:52490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:10.331000 audit: BPF prog-id=424 op=UNLOAD Jun 12 23:04:10.331000 audit: BPF prog-id=428 op=UNLOAD Jun 12 23:04:10.340833 kernel: audit: type=1334 audit(1781305450.331:1678): prog-id=424 op=UNLOAD Jun 12 23:04:10.432524 systemd[1]: var-lib-docker-overlay2-3279b69beede32691989d10746dcc02e58d7bdb2e76eea87bc3b644ffabc498c\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:10.499064 containerd[2455]: time="2026-06-12T23:04:10.498956800Z" level=info msg="connecting to shim 0fe08c10773d99a2fa6124851dfb1aaa49c64e5c125936e311922b352bc70300" address="unix:///run/containerd/s/c83ebd70f74651643250685af604d0fcfd60e5f45b895bd6e8fa1cf4b2a86de6" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:10.518921 systemd[1]: Started docker-0fe08c10773d99a2fa6124851dfb1aaa49c64e5c125936e311922b352bc70300.scope - libcontainer container 0fe08c10773d99a2fa6124851dfb1aaa49c64e5c125936e311922b352bc70300. Jun 12 23:04:10.526000 audit: BPF prog-id=429 op=LOAD Jun 12 23:04:10.527000 audit: BPF prog-id=430 op=LOAD Jun 12 23:04:10.527000 audit[10072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3c3146b9f80 a2=98 a3=0 items=0 ppid=10061 pid=10072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666530386331303737336439396132666136313234383531 Jun 12 23:04:10.527000 audit: BPF prog-id=430 op=UNLOAD Jun 12 23:04:10.527000 audit[10072]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10061 pid=10072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666530386331303737336439396132666136313234383531 Jun 12 23:04:10.527000 audit: BPF prog-id=431 op=LOAD Jun 12 23:04:10.527000 audit[10072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3c3146ba258 a2=98 a3=0 items=0 ppid=10061 pid=10072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666530386331303737336439396132666136313234383531 Jun 12 23:04:10.527000 audit: BPF prog-id=432 op=LOAD Jun 12 23:04:10.527000 audit[10072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3c3146b9f98 a2=98 a3=0 items=0 ppid=10061 pid=10072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666530386331303737336439396132666136313234383531 Jun 12 23:04:10.527000 audit: BPF prog-id=432 op=UNLOAD Jun 12 23:04:10.527000 audit[10072]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10061 pid=10072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666530386331303737336439396132666136313234383531 Jun 12 23:04:10.527000 audit: BPF prog-id=431 op=UNLOAD Jun 12 23:04:10.527000 audit[10072]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10061 pid=10072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.527000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666530386331303737336439396132666136313234383531 Jun 12 23:04:10.528000 audit: BPF prog-id=433 op=LOAD Jun 12 23:04:10.528000 audit[10072]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3c3146ba4a8 a2=98 a3=0 items=0 ppid=10061 pid=10072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30666530386331303737336439396132666136313234383531 Jun 12 23:04:10.540400 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:10.548364 kernel: docker0: port 1(veth4baa532) entered blocking state Jun 12 23:04:10.548430 kernel: docker0: port 1(veth4baa532) entered disabled state Jun 12 23:04:10.551551 kernel: veth4baa532: entered allmulticast mode Jun 12 23:04:10.555027 kernel: veth4baa532: entered promiscuous mode Jun 12 23:04:10.539000 audit: ANOM_PROMISCUOUS dev=veth4baa532 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:10.539000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b482e70 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.539000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:10.556000 audit[10093]: NETFILTER_CFG table=raw:191 family=2 entries=1 op=nft_register_rule pid=10093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:10.556000 audit[10093]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffaa315c0 a2=0 a3=0 items=0 ppid=2935 pid=10093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:10.556000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:10.557976 systemd-networkd[2176]: veth4baa532: Link UP Jun 12 23:04:10.571792 kernel: eth0: renamed from veth9d65711 Jun 12 23:04:10.579003 kernel: docker0: port 1(veth4baa532) entered blocking state Jun 12 23:04:10.579069 kernel: docker0: port 1(veth4baa532) entered forwarding state Jun 12 23:04:10.579403 systemd-networkd[2176]: veth4baa532: Gained carrier Jun 12 23:04:10.580067 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:10.846263 sshd[10042]: Invalid user odoo from 43.160.253.60 port 52490 Jun 12 23:04:11.009050 sshd[10042]: Connection closed by invalid user odoo 43.160.253.60 port 52490 [preauth] Jun 12 23:04:11.008000 audit[10042]: AUDIT1109 pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:11.010955 systemd[1]: sshd@99-4135-10.0.0.35:22-43.160.253.60:52490.service: Deactivated successfully. Jun 12 23:04:11.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@99-4135-10.0.0.35:22-43.160.253.60:52490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:11.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-4136-10.0.0.35:22-43.160.253.60:52504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:11.183041 systemd[1]: Started sshd@100-4136-10.0.0.35:22-43.160.253.60:52504.service - OpenSSH per-connection server daemon (43.160.253.60:52504). Jun 12 23:04:11.604659 systemd[1]: docker-0fe08c10773d99a2fa6124851dfb1aaa49c64e5c125936e311922b352bc70300.scope: Deactivated successfully. Jun 12 23:04:11.615756 containerd[2455]: time="2026-06-12T23:04:11.615678967Z" level=info msg="shim disconnected" id=0fe08c10773d99a2fa6124851dfb1aaa49c64e5c125936e311922b352bc70300 namespace=moby Jun 12 23:04:11.615756 containerd[2455]: time="2026-06-12T23:04:11.615721565Z" level=info msg="cleaning up after shim disconnected" id=0fe08c10773d99a2fa6124851dfb1aaa49c64e5c125936e311922b352bc70300 namespace=moby Jun 12 23:04:11.615756 containerd[2455]: time="2026-06-12T23:04:11.615728172Z" level=info msg="cleaning up dead shim" id=0fe08c10773d99a2fa6124851dfb1aaa49c64e5c125936e311922b352bc70300 namespace=moby Jun 12 23:04:11.646872 kernel: docker0: port 1(veth4baa532) entered disabled state Jun 12 23:04:11.646918 systemd-networkd[2176]: veth4baa532: Lost carrier Jun 12 23:04:11.650799 kernel: veth9d65711: renamed from eth0 Jun 12 23:04:11.669000 audit[10129]: NETFILTER_CFG table=raw:192 family=2 entries=1 op=nft_unregister_rule pid=10129 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:11.669000 audit[10129]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc09f6490 a2=0 a3=0 items=0 ppid=2935 pid=10129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.669000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:11.677268 systemd-networkd[2176]: veth4baa532: Link DOWN Jun 12 23:04:11.680823 kernel: docker0: port 1(veth4baa532) entered disabled state Jun 12 23:04:11.688134 kernel: veth4baa532 (unregistering): left allmulticast mode Jun 12 23:04:11.688206 kernel: veth4baa532 (unregistering): left promiscuous mode Jun 12 23:04:11.676000 audit: ANOM_PROMISCUOUS dev=veth4baa532 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:11.688602 kernel: docker0: port 1(veth4baa532) entered disabled state Jun 12 23:04:11.693344 sshd[10104]: Invalid user devops from 43.160.253.60 port 52504 Jun 12 23:04:11.676000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c47d220 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.676000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:11.703647 systemd[1]: run-docker-netns-f668d219e5bc.mount: Deactivated successfully. Jun 12 23:04:11.707561 systemd[1]: var-lib-docker-overlay2-3279b69beede32691989d10746dcc02e58d7bdb2e76eea87bc3b644ffabc498c-merged.mount: Deactivated successfully. Jun 12 23:04:11.716000 audit: BPF prog-id=429 op=UNLOAD Jun 12 23:04:11.716000 audit: BPF prog-id=433 op=UNLOAD Jun 12 23:04:11.796734 systemd[1]: var-lib-docker-overlay2-30ab8484f1bfa84514d1d1163b754bb58f2629a89aa6fec6d2b805c17076688c\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:11.854964 sshd[10104]: Connection closed by invalid user devops 43.160.253.60 port 52504 [preauth] Jun 12 23:04:11.854000 audit[10104]: AUDIT1109 pid=10104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:11.856730 systemd[1]: sshd@100-4136-10.0.0.35:22-43.160.253.60:52504.service: Deactivated successfully. Jun 12 23:04:11.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@100-4136-10.0.0.35:22-43.160.253.60:52504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:11.868411 containerd[2455]: time="2026-06-12T23:04:11.868355858Z" level=info msg="connecting to shim 9371efb359aa1d37f2fbdcd27095e23e250a70220f7cdce1f1f68672d0732637" address="unix:///run/containerd/s/23440c74d6241e4e0a7a6d88d4376210b56c736a90bee7c309bb3f28df7f6f2c" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:11.889069 systemd[1]: Started docker-9371efb359aa1d37f2fbdcd27095e23e250a70220f7cdce1f1f68672d0732637.scope - libcontainer container 9371efb359aa1d37f2fbdcd27095e23e250a70220f7cdce1f1f68672d0732637. Jun 12 23:04:11.896000 audit: BPF prog-id=434 op=LOAD Jun 12 23:04:11.896000 audit: BPF prog-id=435 op=LOAD Jun 12 23:04:11.896000 audit[10160]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2f60c9a57f80 a2=98 a3=0 items=0 ppid=10146 pid=10160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333731656662333539616131643337663266626463643237 Jun 12 23:04:11.896000 audit: BPF prog-id=435 op=UNLOAD Jun 12 23:04:11.896000 audit[10160]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10146 pid=10160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333731656662333539616131643337663266626463643237 Jun 12 23:04:11.896000 audit: BPF prog-id=436 op=LOAD Jun 12 23:04:11.896000 audit[10160]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2f60c9a58258 a2=98 a3=0 items=0 ppid=10146 pid=10160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333731656662333539616131643337663266626463643237 Jun 12 23:04:11.897000 audit: BPF prog-id=437 op=LOAD Jun 12 23:04:11.897000 audit[10160]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2f60c9a57f98 a2=98 a3=0 items=0 ppid=10146 pid=10160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333731656662333539616131643337663266626463643237 Jun 12 23:04:11.897000 audit: BPF prog-id=437 op=UNLOAD Jun 12 23:04:11.897000 audit[10160]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10146 pid=10160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333731656662333539616131643337663266626463643237 Jun 12 23:04:11.897000 audit: BPF prog-id=436 op=UNLOAD Jun 12 23:04:11.897000 audit[10160]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10146 pid=10160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333731656662333539616131643337663266626463643237 Jun 12 23:04:11.897000 audit: BPF prog-id=438 op=LOAD Jun 12 23:04:11.897000 audit[10160]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2f60c9a584a8 a2=98 a3=0 items=0 ppid=10146 pid=10160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39333731656662333539616131643337663266626463643237 Jun 12 23:04:11.909774 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:11.917809 kernel: docker0: port 1(veth09e98af) entered blocking state Jun 12 23:04:11.917879 kernel: docker0: port 1(veth09e98af) entered disabled state Jun 12 23:04:11.920432 kernel: veth09e98af: entered allmulticast mode Jun 12 23:04:11.909000 audit: ANOM_PROMISCUOUS dev=veth09e98af prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:11.923847 kernel: veth09e98af: entered promiscuous mode Jun 12 23:04:11.909000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaa150 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.909000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:11.925000 audit[10182]: NETFILTER_CFG table=raw:193 family=2 entries=1 op=nft_register_rule pid=10182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:11.925000 audit[10182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe131ac90 a2=0 a3=0 items=0 ppid=2935 pid=10182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:11.925000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:11.926217 systemd-networkd[2176]: veth09e98af: Link UP Jun 12 23:04:11.947797 kernel: eth0: renamed from veth165ee9c Jun 12 23:04:11.947875 kernel: docker0: port 1(veth09e98af) entered blocking state Jun 12 23:04:11.947897 kernel: docker0: port 1(veth09e98af) entered forwarding state Jun 12 23:04:11.950423 systemd-networkd[2176]: veth09e98af: Gained carrier Jun 12 23:04:11.950743 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:12.027043 systemd[1]: Started sshd@101-62-10.0.0.35:22-43.160.253.60:52514.service - OpenSSH per-connection server daemon (43.160.253.60:52514). Jun 12 23:04:12.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-62-10.0.0.35:22-43.160.253.60:52514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:12.538281 sshd[10192]: Invalid user admin from 43.160.253.60 port 52514 Jun 12 23:04:12.699858 sshd[10192]: Connection closed by invalid user admin 43.160.253.60 port 52514 [preauth] Jun 12 23:04:12.698000 audit[10192]: AUDIT1109 pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:12.701722 systemd[1]: sshd@101-62-10.0.0.35:22-43.160.253.60:52514.service: Deactivated successfully. Jun 12 23:04:12.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@101-62-10.0.0.35:22-43.160.253.60:52514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:12.875293 systemd[1]: Started sshd@102-4137-10.0.0.35:22-43.160.253.60:52516.service - OpenSSH per-connection server daemon (43.160.253.60:52516). Jun 12 23:04:12.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-4137-10.0.0.35:22-43.160.253.60:52516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:12.975451 systemd[1]: docker-9371efb359aa1d37f2fbdcd27095e23e250a70220f7cdce1f1f68672d0732637.scope: Deactivated successfully. Jun 12 23:04:12.985581 containerd[2455]: time="2026-06-12T23:04:12.985501843Z" level=info msg="shim disconnected" id=9371efb359aa1d37f2fbdcd27095e23e250a70220f7cdce1f1f68672d0732637 namespace=moby Jun 12 23:04:12.985581 containerd[2455]: time="2026-06-12T23:04:12.985577119Z" level=info msg="cleaning up after shim disconnected" id=9371efb359aa1d37f2fbdcd27095e23e250a70220f7cdce1f1f68672d0732637 namespace=moby Jun 12 23:04:12.985908 containerd[2455]: time="2026-06-12T23:04:12.985587815Z" level=info msg="cleaning up dead shim" id=9371efb359aa1d37f2fbdcd27095e23e250a70220f7cdce1f1f68672d0732637 namespace=moby Jun 12 23:04:12.985929 dockerd[2935]: time="2026-06-12T23:04:12.985887935Z" level=info msg="ignoring event" container=9371efb359aa1d37f2fbdcd27095e23e250a70220f7cdce1f1f68672d0732637 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:13.016650 kernel: docker0: port 1(veth09e98af) entered disabled state Jun 12 23:04:13.014911 systemd-networkd[2176]: veth09e98af: Lost carrier Jun 12 23:04:13.017010 kernel: veth165ee9c: renamed from eth0 Jun 12 23:04:13.034000 audit[10223]: NETFILTER_CFG table=raw:194 family=2 entries=1 op=nft_unregister_rule pid=10223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:13.034000 audit[10223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff1c11aa0 a2=0 a3=0 items=0 ppid=2935 pid=10223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.034000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:13.053446 systemd-networkd[2176]: veth09e98af: Link DOWN Jun 12 23:04:13.057994 kernel: docker0: port 1(veth09e98af) entered disabled state Jun 12 23:04:13.068174 kernel: veth09e98af (unregistering): left allmulticast mode Jun 12 23:04:13.068248 kernel: veth09e98af (unregistering): left promiscuous mode Jun 12 23:04:13.051000 audit: ANOM_PROMISCUOUS dev=veth09e98af prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:13.072091 kernel: docker0: port 1(veth09e98af) entered disabled state Jun 12 23:04:13.051000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb10c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.051000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:13.084448 systemd[1]: run-docker-netns-8145fd63fb9b.mount: Deactivated successfully. Jun 12 23:04:13.087323 systemd[1]: var-lib-docker-overlay2-30ab8484f1bfa84514d1d1163b754bb58f2629a89aa6fec6d2b805c17076688c-merged.mount: Deactivated successfully. Jun 12 23:04:13.104000 audit: BPF prog-id=434 op=UNLOAD Jun 12 23:04:13.104000 audit: BPF prog-id=438 op=UNLOAD Jun 12 23:04:13.182564 systemd[1]: var-lib-docker-overlay2-86c7814a146c5375770e510e01342019abfd4d45900b4bdeb3c4e627cb35c565\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:13.247264 containerd[2455]: time="2026-06-12T23:04:13.247228103Z" level=info msg="connecting to shim f0a44f0533f64a2ddd7994708b22ae7754915b0fb64d7b2f1c266d8389be1893" address="unix:///run/containerd/s/0e5e81d0c742bbf4f172bcd72f03cf55ee4480469270bc8aebe7f6c16b2b9d8f" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:13.266922 systemd[1]: Started docker-f0a44f0533f64a2ddd7994708b22ae7754915b0fb64d7b2f1c266d8389be1893.scope - libcontainer container f0a44f0533f64a2ddd7994708b22ae7754915b0fb64d7b2f1c266d8389be1893. Jun 12 23:04:13.273000 audit: BPF prog-id=439 op=LOAD Jun 12 23:04:13.273000 audit: BPF prog-id=440 op=LOAD Jun 12 23:04:13.273000 audit[10252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=a3ccd237f80 a2=98 a3=0 items=0 ppid=10241 pid=10252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66306134346630353333663634613264646437393934373038 Jun 12 23:04:13.274000 audit: BPF prog-id=440 op=UNLOAD Jun 12 23:04:13.274000 audit[10252]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10241 pid=10252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66306134346630353333663634613264646437393934373038 Jun 12 23:04:13.274000 audit: BPF prog-id=441 op=LOAD Jun 12 23:04:13.274000 audit[10252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=a3ccd238258 a2=98 a3=0 items=0 ppid=10241 pid=10252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66306134346630353333663634613264646437393934373038 Jun 12 23:04:13.274000 audit: BPF prog-id=442 op=LOAD Jun 12 23:04:13.274000 audit[10252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=a3ccd237f98 a2=98 a3=0 items=0 ppid=10241 pid=10252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66306134346630353333663634613264646437393934373038 Jun 12 23:04:13.274000 audit: BPF prog-id=442 op=UNLOAD Jun 12 23:04:13.274000 audit[10252]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10241 pid=10252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66306134346630353333663634613264646437393934373038 Jun 12 23:04:13.274000 audit: BPF prog-id=441 op=UNLOAD Jun 12 23:04:13.274000 audit[10252]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10241 pid=10252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66306134346630353333663634613264646437393934373038 Jun 12 23:04:13.274000 audit: BPF prog-id=443 op=LOAD Jun 12 23:04:13.274000 audit[10252]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=a3ccd2384a8 a2=98 a3=0 items=0 ppid=10241 pid=10252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66306134346630353333663634613264646437393934373038 Jun 12 23:04:13.292802 kernel: docker0: port 1(vethc9c41d9) entered blocking state Jun 12 23:04:13.299733 kernel: docker0: port 1(vethc9c41d9) entered disabled state Jun 12 23:04:13.299845 kernel: vethc9c41d9: entered allmulticast mode Jun 12 23:04:13.303025 kernel: vethc9c41d9: entered promiscuous mode Jun 12 23:04:13.286000 audit: ANOM_PROMISCUOUS dev=vethc9c41d9 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:13.303761 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:13.286000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaba40 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.286000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:13.307000 audit[10275]: NETFILTER_CFG table=raw:195 family=2 entries=1 op=nft_register_rule pid=10275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:13.307000 audit[10275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe3294af0 a2=0 a3=0 items=0 ppid=2935 pid=10275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:13.307000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:13.310864 systemd-networkd[2176]: vethc9c41d9: Link UP Jun 12 23:04:13.333086 kernel: eth0: renamed from veth91cba7f Jun 12 23:04:13.333175 kernel: docker0: port 1(vethc9c41d9) entered blocking state Jun 12 23:04:13.333203 kernel: docker0: port 1(vethc9c41d9) entered forwarding state Jun 12 23:04:13.333191 systemd-networkd[2176]: vethc9c41d9: Gained carrier Jun 12 23:04:13.333683 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:13.548248 sshd[10198]: Connection closed by authenticating user root 43.160.253.60 port 52516 [preauth] Jun 12 23:04:13.546000 audit[10198]: AUDIT1109 pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:13.550067 systemd[1]: sshd@102-4137-10.0.0.35:22-43.160.253.60:52516.service: Deactivated successfully. Jun 12 23:04:13.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@102-4137-10.0.0.35:22-43.160.253.60:52516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:13.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-4138-10.0.0.35:22-43.160.253.60:52518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:13.719304 systemd[1]: Started sshd@103-4138-10.0.0.35:22-43.160.253.60:52518.service - OpenSSH per-connection server daemon (43.160.253.60:52518). Jun 12 23:04:14.233315 sshd[10286]: Invalid user apache from 43.160.253.60 port 52518 Jun 12 23:04:14.358522 systemd[1]: docker-f0a44f0533f64a2ddd7994708b22ae7754915b0fb64d7b2f1c266d8389be1893.scope: Deactivated successfully. Jun 12 23:04:14.370081 dockerd[2935]: time="2026-06-12T23:04:14.370045357Z" level=info msg="ignoring event" container=f0a44f0533f64a2ddd7994708b22ae7754915b0fb64d7b2f1c266d8389be1893 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:14.370684 containerd[2455]: time="2026-06-12T23:04:14.370651933Z" level=info msg="shim disconnected" id=f0a44f0533f64a2ddd7994708b22ae7754915b0fb64d7b2f1c266d8389be1893 namespace=moby Jun 12 23:04:14.370684 containerd[2455]: time="2026-06-12T23:04:14.370681419Z" level=info msg="cleaning up after shim disconnected" id=f0a44f0533f64a2ddd7994708b22ae7754915b0fb64d7b2f1c266d8389be1893 namespace=moby Jun 12 23:04:14.370684 containerd[2455]: time="2026-06-12T23:04:14.370687075Z" level=info msg="cleaning up dead shim" id=f0a44f0533f64a2ddd7994708b22ae7754915b0fb64d7b2f1c266d8389be1893 namespace=moby Jun 12 23:04:14.393588 systemd-networkd[2176]: vethc9c41d9: Lost carrier Jun 12 23:04:14.393925 kernel: docker0: port 1(vethc9c41d9) entered disabled state Jun 12 23:04:14.396828 sshd[10286]: Connection closed by invalid user apache 43.160.253.60 port 52518 [preauth] Jun 12 23:04:14.395000 audit[10286]: AUDIT1109 pid=10286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:14.398047 kernel: veth91cba7f: renamed from eth0 Jun 12 23:04:14.398158 systemd[1]: sshd@103-4138-10.0.0.35:22-43.160.253.60:52518.service: Deactivated successfully. Jun 12 23:04:14.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@103-4138-10.0.0.35:22-43.160.253.60:52518 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:14.410000 audit[10313]: NETFILTER_CFG table=raw:196 family=2 entries=1 op=nft_unregister_rule pid=10313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:14.410000 audit[10313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe92ab400 a2=0 a3=0 items=0 ppid=2935 pid=10313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.410000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:14.422220 systemd-networkd[2176]: vethc9c41d9: Link DOWN Jun 12 23:04:14.429562 kernel: docker0: port 1(vethc9c41d9) entered disabled state Jun 12 23:04:14.429622 kernel: vethc9c41d9 (unregistering): left allmulticast mode Jun 12 23:04:14.433004 kernel: vethc9c41d9 (unregistering): left promiscuous mode Jun 12 23:04:14.420000 audit: ANOM_PROMISCUOUS dev=vethc9c41d9 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:14.436441 kernel: docker0: port 1(vethc9c41d9) entered disabled state Jun 12 23:04:14.420000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8daaa0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.420000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:14.445626 systemd[1]: run-docker-netns-4b0a021073f9.mount: Deactivated successfully. Jun 12 23:04:14.451847 systemd[1]: var-lib-docker-overlay2-86c7814a146c5375770e510e01342019abfd4d45900b4bdeb3c4e627cb35c565-merged.mount: Deactivated successfully. Jun 12 23:04:14.464000 audit: BPF prog-id=439 op=UNLOAD Jun 12 23:04:14.464000 audit: BPF prog-id=443 op=UNLOAD Jun 12 23:04:14.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-4139-10.0.0.35:22-43.160.253.60:52528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:14.566542 systemd[1]: Started sshd@104-4139-10.0.0.35:22-43.160.253.60:52528.service - OpenSSH per-connection server daemon (43.160.253.60:52528). Jun 12 23:04:14.604493 containerd[2455]: time="2026-06-12T23:04:14.604454133Z" level=info msg="connecting to shim 5ac50eb16e9f3ce5e307acfc470735a3be7fa556af4d0cac72cf4b6dcde1e2c2" address="unix:///run/containerd/s/d322ec3c4f30f681cf8cc2eabc43403b5571a04b50bc7edf41d1796c390ba6c5" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:14.620908 systemd[1]: Started docker-5ac50eb16e9f3ce5e307acfc470735a3be7fa556af4d0cac72cf4b6dcde1e2c2.scope - libcontainer container 5ac50eb16e9f3ce5e307acfc470735a3be7fa556af4d0cac72cf4b6dcde1e2c2. Jun 12 23:04:14.626000 audit: BPF prog-id=444 op=LOAD Jun 12 23:04:14.627000 audit: BPF prog-id=445 op=LOAD Jun 12 23:04:14.627000 audit[10346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=25b26a737f80 a2=98 a3=0 items=0 ppid=10335 pid=10346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35616335306562313665396633636535653330376163666334 Jun 12 23:04:14.627000 audit: BPF prog-id=445 op=UNLOAD Jun 12 23:04:14.627000 audit[10346]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10335 pid=10346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35616335306562313665396633636535653330376163666334 Jun 12 23:04:14.627000 audit: BPF prog-id=446 op=LOAD Jun 12 23:04:14.627000 audit[10346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=25b26a738258 a2=98 a3=0 items=0 ppid=10335 pid=10346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35616335306562313665396633636535653330376163666334 Jun 12 23:04:14.628000 audit: BPF prog-id=447 op=LOAD Jun 12 23:04:14.628000 audit[10346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=25b26a737f98 a2=98 a3=0 items=0 ppid=10335 pid=10346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35616335306562313665396633636535653330376163666334 Jun 12 23:04:14.628000 audit: BPF prog-id=447 op=UNLOAD Jun 12 23:04:14.628000 audit[10346]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10335 pid=10346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35616335306562313665396633636535653330376163666334 Jun 12 23:04:14.628000 audit: BPF prog-id=446 op=UNLOAD Jun 12 23:04:14.628000 audit[10346]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10335 pid=10346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35616335306562313665396633636535653330376163666334 Jun 12 23:04:14.628000 audit: BPF prog-id=448 op=LOAD Jun 12 23:04:14.628000 audit[10346]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=25b26a7384a8 a2=98 a3=0 items=0 ppid=10335 pid=10346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35616335306562313665396633636535653330376163666334 Jun 12 23:04:14.649537 kernel: docker0: port 1(veth60ca6ec) entered blocking state Jun 12 23:04:14.649627 kernel: docker0: port 1(veth60ca6ec) entered disabled state Jun 12 23:04:14.652444 kernel: veth60ca6ec: entered allmulticast mode Jun 12 23:04:14.655375 kernel: veth60ca6ec: entered promiscuous mode Jun 12 23:04:14.640000 audit: ANOM_PROMISCUOUS dev=veth60ca6ec prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:14.640000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b944630 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.640000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:14.657241 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:14.656000 audit[10368]: NETFILTER_CFG table=raw:197 family=2 entries=1 op=nft_register_rule pid=10368 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:14.656000 audit[10368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd2a99b60 a2=0 a3=0 items=0 ppid=2935 pid=10368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:14.656000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:14.658344 systemd-networkd[2176]: veth60ca6ec: Link UP Jun 12 23:04:14.677147 kernel: eth0: renamed from veth95d149f Jun 12 23:04:14.677224 kernel: docker0: port 1(veth60ca6ec) entered blocking state Jun 12 23:04:14.680551 kernel: docker0: port 1(veth60ca6ec) entered forwarding state Jun 12 23:04:14.680852 systemd-networkd[2176]: veth60ca6ec: Gained carrier Jun 12 23:04:14.681671 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:15.237607 sshd[10322]: Connection closed by authenticating user root 43.160.253.60 port 52528 [preauth] Jun 12 23:04:15.236000 audit[10322]: AUDIT1109 pid=10322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:15.241613 kernel: kauditd_printk_skb: 152 callbacks suppressed Jun 12 23:04:15.241659 kernel: audit: type=1109 audit(1781305455.236:1747): pid=10322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:15.257373 systemd[1]: sshd@104-4139-10.0.0.35:22-43.160.253.60:52528.service: Deactivated successfully. Jun 12 23:04:15.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-4139-10.0.0.35:22-43.160.253.60:52528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:15.272802 kernel: audit: type=1131 audit(1781305455.255:1748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@104-4139-10.0.0.35:22-43.160.253.60:52528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:15.409473 systemd[1]: Started sshd@105-4140-10.0.0.35:22-43.160.253.60:52534.service - OpenSSH per-connection server daemon (43.160.253.60:52534). Jun 12 23:04:15.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-4140-10.0.0.35:22-43.160.253.60:52534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:15.425815 kernel: audit: type=1130 audit(1781305455.407:1749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-4140-10.0.0.35:22-43.160.253.60:52534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:15.706771 systemd[1]: docker-5ac50eb16e9f3ce5e307acfc470735a3be7fa556af4d0cac72cf4b6dcde1e2c2.scope: Deactivated successfully. Jun 12 23:04:15.718184 dockerd[2935]: time="2026-06-12T23:04:15.718038547Z" level=info msg="ignoring event" container=5ac50eb16e9f3ce5e307acfc470735a3be7fa556af4d0cac72cf4b6dcde1e2c2 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:15.718487 containerd[2455]: time="2026-06-12T23:04:15.718162732Z" level=info msg="shim disconnected" id=5ac50eb16e9f3ce5e307acfc470735a3be7fa556af4d0cac72cf4b6dcde1e2c2 namespace=moby Jun 12 23:04:15.718487 containerd[2455]: time="2026-06-12T23:04:15.718185667Z" level=info msg="cleaning up after shim disconnected" id=5ac50eb16e9f3ce5e307acfc470735a3be7fa556af4d0cac72cf4b6dcde1e2c2 namespace=moby Jun 12 23:04:15.718487 containerd[2455]: time="2026-06-12T23:04:15.718191162Z" level=info msg="cleaning up dead shim" id=5ac50eb16e9f3ce5e307acfc470735a3be7fa556af4d0cac72cf4b6dcde1e2c2 namespace=moby Jun 12 23:04:15.741733 systemd-networkd[2176]: veth60ca6ec: Lost carrier Jun 12 23:04:15.742055 kernel: docker0: port 1(veth60ca6ec) entered disabled state Jun 12 23:04:15.744794 kernel: veth95d149f: renamed from eth0 Jun 12 23:04:15.761000 audit[10404]: NETFILTER_CFG table=raw:198 family=2 entries=1 op=nft_unregister_rule pid=10404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:15.761000 audit[10404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc4c15d10 a2=0 a3=0 items=0 ppid=2935 pid=10404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:15.790592 kernel: audit: type=1325 audit(1781305455.761:1750): table=raw:198 family=2 entries=1 op=nft_unregister_rule pid=10404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:15.790678 kernel: audit: type=1300 audit(1781305455.761:1750): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc4c15d10 a2=0 a3=0 items=0 ppid=2935 pid=10404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:15.761000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:15.804045 kernel: audit: type=1327 audit(1781305455.761:1750): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:15.808706 kernel: docker0: port 1(veth60ca6ec) entered disabled state Jun 12 23:04:15.808398 systemd-networkd[2176]: veth60ca6ec: Link DOWN Jun 12 23:04:15.817274 kernel: veth60ca6ec (unregistering): left allmulticast mode Jun 12 23:04:15.817338 kernel: veth60ca6ec (unregistering): left promiscuous mode Jun 12 23:04:15.789000 audit: ANOM_PROMISCUOUS dev=veth60ca6ec prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:15.828793 kernel: audit: type=1700 audit(1781305455.789:1751): dev=veth60ca6ec prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:15.828866 kernel: docker0: port 1(veth60ca6ec) entered disabled state Jun 12 23:04:15.789000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bd8a980 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:15.789000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:15.866812 kernel: audit: type=1300 audit(1781305455.789:1751): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bd8a980 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:15.866898 kernel: audit: type=1327 audit(1781305455.789:1751): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:15.868892 systemd[1]: run-docker-netns-55023abb7535.mount: Deactivated successfully. Jun 12 23:04:15.874863 systemd[1]: var-lib-docker-overlay2-736bd15bcdfe60510a51a0e254ba08864e64f926630290d946c8d9be9bec2aa7-merged.mount: Deactivated successfully. Jun 12 23:04:15.888000 audit: BPF prog-id=444 op=UNLOAD Jun 12 23:04:15.892000 audit: BPF prog-id=448 op=UNLOAD Jun 12 23:04:15.940506 kernel: audit: type=1334 audit(1781305455.888:1752): prog-id=444 op=UNLOAD Jun 12 23:04:15.954727 sshd[10379]: Invalid user hduser from 43.160.253.60 port 52534 Jun 12 23:04:16.078953 containerd[2455]: time="2026-06-12T23:04:16.078912070Z" level=info msg="connecting to shim 15ac1b0f1df4615e6954e41f5aaa728468146d4abba3f7a3dbff514844e2d1c4" address="unix:///run/containerd/s/be22c44bccfd8185eae3faa42c0f8efaaad6414dec203d6c73152d682337578f" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:16.097937 systemd[1]: Started docker-15ac1b0f1df4615e6954e41f5aaa728468146d4abba3f7a3dbff514844e2d1c4.scope - libcontainer container 15ac1b0f1df4615e6954e41f5aaa728468146d4abba3f7a3dbff514844e2d1c4. Jun 12 23:04:16.104000 audit: BPF prog-id=449 op=LOAD Jun 12 23:04:16.104000 audit: BPF prog-id=450 op=LOAD Jun 12 23:04:16.104000 audit[10432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=452ee9da3f80 a2=98 a3=0 items=0 ppid=10421 pid=10432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:16.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31356163316230663164663436313565363935346534316635 Jun 12 23:04:16.105000 audit: BPF prog-id=450 op=UNLOAD Jun 12 23:04:16.105000 audit[10432]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10421 pid=10432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:16.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31356163316230663164663436313565363935346534316635 Jun 12 23:04:16.105000 audit: BPF prog-id=451 op=LOAD Jun 12 23:04:16.105000 audit[10432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=452ee9da4258 a2=98 a3=0 items=0 ppid=10421 pid=10432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:16.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31356163316230663164663436313565363935346534316635 Jun 12 23:04:16.105000 audit: BPF prog-id=452 op=LOAD Jun 12 23:04:16.105000 audit[10432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=452ee9da3f98 a2=98 a3=0 items=0 ppid=10421 pid=10432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:16.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31356163316230663164663436313565363935346534316635 Jun 12 23:04:16.105000 audit: BPF prog-id=452 op=UNLOAD Jun 12 23:04:16.105000 audit[10432]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10421 pid=10432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:16.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31356163316230663164663436313565363935346534316635 Jun 12 23:04:16.105000 audit: BPF prog-id=451 op=UNLOAD Jun 12 23:04:16.105000 audit[10432]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10421 pid=10432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:16.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31356163316230663164663436313565363935346534316635 Jun 12 23:04:16.105000 audit: BPF prog-id=453 op=LOAD Jun 12 23:04:16.105000 audit[10432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=452ee9da44a8 a2=98 a3=0 items=0 ppid=10421 pid=10432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:16.105000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31356163316230663164663436313565363935346534316635 Jun 12 23:04:16.116250 sshd[10379]: Connection closed by invalid user hduser 43.160.253.60 port 52534 [preauth] Jun 12 23:04:16.115000 audit[10379]: AUDIT1109 pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:16.119327 systemd[1]: sshd@105-4140-10.0.0.35:22-43.160.253.60:52534.service: Deactivated successfully. Jun 12 23:04:16.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@105-4140-10.0.0.35:22-43.160.253.60:52534 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:16.123452 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:16.132888 kernel: docker0: port 1(veth981c005) entered blocking state Jun 12 23:04:16.132927 kernel: docker0: port 1(veth981c005) entered disabled state Jun 12 23:04:16.136284 kernel: veth981c005: entered allmulticast mode Jun 12 23:04:16.139278 kernel: veth981c005: entered promiscuous mode Jun 12 23:04:16.121000 audit: ANOM_PROMISCUOUS dev=veth981c005 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:16.121000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0c000 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:16.121000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:16.139000 audit[10456]: NETFILTER_CFG table=raw:199 family=2 entries=1 op=nft_register_rule pid=10456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:16.139000 audit[10456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd3bdc1d0 a2=0 a3=0 items=0 ppid=2935 pid=10456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:16.139000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:16.142262 systemd-networkd[2176]: veth981c005: Link UP Jun 12 23:04:16.156798 kernel: eth0: renamed from veth603ca48 Jun 12 23:04:16.164795 kernel: docker0: port 1(veth981c005) entered blocking state Jun 12 23:04:16.164868 kernel: docker0: port 1(veth981c005) entered forwarding state Jun 12 23:04:16.165117 systemd-networkd[2176]: veth981c005: Gained carrier Jun 12 23:04:16.165857 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:16.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-4141-10.0.0.35:22-43.160.253.60:60786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:16.295037 systemd[1]: Started sshd@106-4141-10.0.0.35:22-43.160.253.60:60786.service - OpenSSH per-connection server daemon (43.160.253.60:60786). Jun 12 23:04:16.805493 sshd[10465]: Invalid user devops from 43.160.253.60 port 60786 Jun 12 23:04:16.967684 sshd[10465]: Connection closed by invalid user devops 43.160.253.60 port 60786 [preauth] Jun 12 23:04:16.967000 audit[10465]: AUDIT1109 pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:16.969806 systemd[1]: sshd@106-4141-10.0.0.35:22-43.160.253.60:60786.service: Deactivated successfully. Jun 12 23:04:16.969000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@106-4141-10.0.0.35:22-43.160.253.60:60786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:17.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-4142-10.0.0.35:22-43.160.253.60:60790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:17.142053 systemd[1]: Started sshd@107-4142-10.0.0.35:22-43.160.253.60:60790.service - OpenSSH per-connection server daemon (43.160.253.60:60790). Jun 12 23:04:17.194372 systemd[1]: docker-15ac1b0f1df4615e6954e41f5aaa728468146d4abba3f7a3dbff514844e2d1c4.scope: Deactivated successfully. Jun 12 23:04:17.208069 containerd[2455]: time="2026-06-12T23:04:17.208010127Z" level=info msg="shim disconnected" id=15ac1b0f1df4615e6954e41f5aaa728468146d4abba3f7a3dbff514844e2d1c4 namespace=moby Jun 12 23:04:17.208069 containerd[2455]: time="2026-06-12T23:04:17.208037630Z" level=info msg="cleaning up after shim disconnected" id=15ac1b0f1df4615e6954e41f5aaa728468146d4abba3f7a3dbff514844e2d1c4 namespace=moby Jun 12 23:04:17.208069 containerd[2455]: time="2026-06-12T23:04:17.208042910Z" level=info msg="cleaning up dead shim" id=15ac1b0f1df4615e6954e41f5aaa728468146d4abba3f7a3dbff514844e2d1c4 namespace=moby Jun 12 23:04:17.208510 dockerd[2935]: time="2026-06-12T23:04:17.208036990Z" level=info msg="ignoring event" container=15ac1b0f1df4615e6954e41f5aaa728468146d4abba3f7a3dbff514844e2d1c4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:17.229635 systemd-networkd[2176]: veth981c005: Lost carrier Jun 12 23:04:17.230098 kernel: docker0: port 1(veth981c005) entered disabled state Jun 12 23:04:17.233822 kernel: veth603ca48: renamed from eth0 Jun 12 23:04:17.245000 audit[10498]: NETFILTER_CFG table=raw:200 family=2 entries=1 op=nft_unregister_rule pid=10498 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:17.245000 audit[10498]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdc017520 a2=0 a3=0 items=0 ppid=2935 pid=10498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.245000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:17.256268 systemd-networkd[2176]: veth981c005: Link DOWN Jun 12 23:04:17.260798 kernel: docker0: port 1(veth981c005) entered disabled state Jun 12 23:04:17.268407 kernel: veth981c005 (unregistering): left allmulticast mode Jun 12 23:04:17.268479 kernel: veth981c005 (unregistering): left promiscuous mode Jun 12 23:04:17.255000 audit: ANOM_PROMISCUOUS dev=veth981c005 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:17.272011 kernel: docker0: port 1(veth981c005) entered disabled state Jun 12 23:04:17.255000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6000 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.255000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:17.286313 systemd[1]: run-docker-netns-83ac4a26f082.mount: Deactivated successfully. Jun 12 23:04:17.288730 systemd[1]: var-lib-docker-overlay2-7a9d62f6565f94d6f04ddd63d406f6be30a4ddc07b2be66181ecbcb58114b110-merged.mount: Deactivated successfully. Jun 12 23:04:17.301000 audit: BPF prog-id=449 op=UNLOAD Jun 12 23:04:17.301000 audit: BPF prog-id=453 op=UNLOAD Jun 12 23:04:17.451134 containerd[2455]: time="2026-06-12T23:04:17.450690347Z" level=info msg="connecting to shim 163031b6b0e7ab62b3e3a364921ecb1093006dd92b6f742c3e534a3c2cb46aa4" address="unix:///run/containerd/s/3d951b09ab85c99ecbd37877ec9315f0a239cc34c7a5b9b69225c06917cea2ac" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:17.469930 systemd[1]: Started docker-163031b6b0e7ab62b3e3a364921ecb1093006dd92b6f742c3e534a3c2cb46aa4.scope - libcontainer container 163031b6b0e7ab62b3e3a364921ecb1093006dd92b6f742c3e534a3c2cb46aa4. Jun 12 23:04:17.477000 audit: BPF prog-id=454 op=LOAD Jun 12 23:04:17.477000 audit: BPF prog-id=455 op=LOAD Jun 12 23:04:17.477000 audit[10527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=18f5b41b7f80 a2=98 a3=0 items=0 ppid=10514 pid=10527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363330333162366230653761623632623365336133363439 Jun 12 23:04:17.477000 audit: BPF prog-id=455 op=UNLOAD Jun 12 23:04:17.477000 audit[10527]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10514 pid=10527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363330333162366230653761623632623365336133363439 Jun 12 23:04:17.477000 audit: BPF prog-id=456 op=LOAD Jun 12 23:04:17.477000 audit[10527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=18f5b41b8258 a2=98 a3=0 items=0 ppid=10514 pid=10527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363330333162366230653761623632623365336133363439 Jun 12 23:04:17.477000 audit: BPF prog-id=457 op=LOAD Jun 12 23:04:17.477000 audit[10527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=18f5b41b7f98 a2=98 a3=0 items=0 ppid=10514 pid=10527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363330333162366230653761623632623365336133363439 Jun 12 23:04:17.477000 audit: BPF prog-id=457 op=UNLOAD Jun 12 23:04:17.477000 audit[10527]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10514 pid=10527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363330333162366230653761623632623365336133363439 Jun 12 23:04:17.477000 audit: BPF prog-id=456 op=UNLOAD Jun 12 23:04:17.477000 audit[10527]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10514 pid=10527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363330333162366230653761623632623365336133363439 Jun 12 23:04:17.477000 audit: BPF prog-id=458 op=LOAD Jun 12 23:04:17.477000 audit[10527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=18f5b41b84a8 a2=98 a3=0 items=0 ppid=10514 pid=10527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31363330333162366230653761623632623365336133363439 Jun 12 23:04:17.496488 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:17.502883 kernel: docker0: port 1(veth541cd76) entered blocking state Jun 12 23:04:17.502961 kernel: docker0: port 1(veth541cd76) entered disabled state Jun 12 23:04:17.505972 kernel: veth541cd76: entered allmulticast mode Jun 12 23:04:17.508880 kernel: veth541cd76: entered promiscuous mode Jun 12 23:04:17.492000 audit: ANOM_PROMISCUOUS dev=veth541cd76 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:17.492000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0cff0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.492000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:17.510000 audit[10547]: NETFILTER_CFG table=raw:201 family=2 entries=1 op=nft_register_rule pid=10547 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:17.510000 audit[10547]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc70522d0 a2=0 a3=0 items=0 ppid=2935 pid=10547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:17.510000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:17.511370 systemd-networkd[2176]: veth541cd76: Link UP Jun 12 23:04:17.532203 kernel: eth0: renamed from veth88540e4 Jun 12 23:04:17.531920 systemd-networkd[2176]: veth541cd76: Gained carrier Jun 12 23:04:17.532332 kernel: docker0: port 1(veth541cd76) entered blocking state Jun 12 23:04:17.532109 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:17.532381 kernel: docker0: port 1(veth541cd76) entered forwarding state Jun 12 23:04:17.656208 sshd[10471]: Invalid user vyos from 43.160.253.60 port 60790 Jun 12 23:04:17.818818 sshd[10471]: Connection closed by invalid user vyos 43.160.253.60 port 60790 [preauth] Jun 12 23:04:17.818000 audit[10471]: AUDIT1109 pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:17.820737 systemd[1]: sshd@107-4142-10.0.0.35:22-43.160.253.60:60790.service: Deactivated successfully. Jun 12 23:04:17.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@107-4142-10.0.0.35:22-43.160.253.60:60790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:17.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-4143-10.0.0.35:22-43.160.253.60:60802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:17.994050 systemd[1]: Started sshd@108-4143-10.0.0.35:22-43.160.253.60:60802.service - OpenSSH per-connection server daemon (43.160.253.60:60802). Jun 12 23:04:18.505857 sshd[10558]: Invalid user web from 43.160.253.60 port 60802 Jun 12 23:04:18.555891 systemd[1]: docker-163031b6b0e7ab62b3e3a364921ecb1093006dd92b6f742c3e534a3c2cb46aa4.scope: Deactivated successfully. Jun 12 23:04:18.568067 dockerd[2935]: time="2026-06-12T23:04:18.567886496Z" level=info msg="ignoring event" container=163031b6b0e7ab62b3e3a364921ecb1093006dd92b6f742c3e534a3c2cb46aa4 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:18.568564 containerd[2455]: time="2026-06-12T23:04:18.568521044Z" level=info msg="shim disconnected" id=163031b6b0e7ab62b3e3a364921ecb1093006dd92b6f742c3e534a3c2cb46aa4 namespace=moby Jun 12 23:04:18.568564 containerd[2455]: time="2026-06-12T23:04:18.568549101Z" level=info msg="cleaning up after shim disconnected" id=163031b6b0e7ab62b3e3a364921ecb1093006dd92b6f742c3e534a3c2cb46aa4 namespace=moby Jun 12 23:04:18.568564 containerd[2455]: time="2026-06-12T23:04:18.568555235Z" level=info msg="cleaning up dead shim" id=163031b6b0e7ab62b3e3a364921ecb1093006dd92b6f742c3e534a3c2cb46aa4 namespace=moby Jun 12 23:04:18.589146 systemd-networkd[2176]: veth541cd76: Lost carrier Jun 12 23:04:18.589804 kernel: docker0: port 1(veth541cd76) entered disabled state Jun 12 23:04:18.592922 kernel: veth88540e4: renamed from eth0 Jun 12 23:04:18.607000 audit[10583]: NETFILTER_CFG table=raw:202 family=2 entries=1 op=nft_unregister_rule pid=10583 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:18.607000 audit[10583]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff65955a0 a2=0 a3=0 items=0 ppid=2935 pid=10583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.607000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:18.615134 systemd-networkd[2176]: veth541cd76: Link DOWN Jun 12 23:04:18.619856 kernel: docker0: port 1(veth541cd76) entered disabled state Jun 12 23:04:18.627249 kernel: veth541cd76 (unregistering): left allmulticast mode Jun 12 23:04:18.627307 kernel: veth541cd76 (unregistering): left promiscuous mode Jun 12 23:04:18.614000 audit: ANOM_PROMISCUOUS dev=veth541cd76 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:18.630896 kernel: docker0: port 1(veth541cd76) entered disabled state Jun 12 23:04:18.614000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe9c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.614000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:18.645258 systemd[1]: run-docker-netns-43305f920366.mount: Deactivated successfully. Jun 12 23:04:18.647988 systemd[1]: var-lib-docker-overlay2-bdacef2317fc7bee43b2cff270900c005e70ac7c751379e97c2341f11a70e9bb-merged.mount: Deactivated successfully. Jun 12 23:04:18.658000 audit: BPF prog-id=454 op=UNLOAD Jun 12 23:04:18.658000 audit: BPF prog-id=458 op=UNLOAD Jun 12 23:04:18.666000 audit[10558]: AUDIT1109 pid=10558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:18.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@108-4143-10.0.0.35:22-43.160.253.60:60802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:18.669526 systemd[1]: sshd@108-4143-10.0.0.35:22-43.160.253.60:60802.service: Deactivated successfully. Jun 12 23:04:18.691577 sshd[10558]: Connection closed by invalid user web 43.160.253.60 port 60802 [preauth] Jun 12 23:04:18.741745 systemd[1]: var-lib-docker-overlay2-73d2d1add37d7e665d3fc63580ec3f374088d0c1a10f91f4263b2102ac2744f8\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:18.811119 containerd[2455]: time="2026-06-12T23:04:18.811025550Z" level=info msg="connecting to shim 6b421ee7055d41f21063b6ba06365733eaa5a81b954dd3972d8053137f0eb7ac" address="unix:///run/containerd/s/6a83761284039ef8a52fabc2b873ea0b2bb322254727236f3e60e7006254f108" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:18.830949 systemd[1]: Started docker-6b421ee7055d41f21063b6ba06365733eaa5a81b954dd3972d8053137f0eb7ac.scope - libcontainer container 6b421ee7055d41f21063b6ba06365733eaa5a81b954dd3972d8053137f0eb7ac. Jun 12 23:04:18.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-63-10.0.0.35:22-43.160.253.60:60814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:18.836918 systemd[1]: Started sshd@109-63-10.0.0.35:22-43.160.253.60:60814.service - OpenSSH per-connection server daemon (43.160.253.60:60814). Jun 12 23:04:18.841000 audit: BPF prog-id=459 op=LOAD Jun 12 23:04:18.845000 audit: BPF prog-id=460 op=LOAD Jun 12 23:04:18.845000 audit[10613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3e8ea6237f80 a2=98 a3=0 items=0 ppid=10601 pid=10613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36623432316565373035356434316632313036336236626130 Jun 12 23:04:18.845000 audit: BPF prog-id=460 op=UNLOAD Jun 12 23:04:18.845000 audit[10613]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10601 pid=10613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36623432316565373035356434316632313036336236626130 Jun 12 23:04:18.845000 audit: BPF prog-id=461 op=LOAD Jun 12 23:04:18.845000 audit[10613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3e8ea6238258 a2=98 a3=0 items=0 ppid=10601 pid=10613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36623432316565373035356434316632313036336236626130 Jun 12 23:04:18.845000 audit: BPF prog-id=462 op=LOAD Jun 12 23:04:18.845000 audit[10613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3e8ea6237f98 a2=98 a3=0 items=0 ppid=10601 pid=10613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36623432316565373035356434316632313036336236626130 Jun 12 23:04:18.845000 audit: BPF prog-id=462 op=UNLOAD Jun 12 23:04:18.845000 audit[10613]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10601 pid=10613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36623432316565373035356434316632313036336236626130 Jun 12 23:04:18.845000 audit: BPF prog-id=461 op=UNLOAD Jun 12 23:04:18.845000 audit[10613]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10601 pid=10613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36623432316565373035356434316632313036336236626130 Jun 12 23:04:18.845000 audit: BPF prog-id=463 op=LOAD Jun 12 23:04:18.845000 audit[10613]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3e8ea62384a8 a2=98 a3=0 items=0 ppid=10601 pid=10613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36623432316565373035356434316632313036336236626130 Jun 12 23:04:18.861955 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:18.869619 kernel: docker0: port 1(veth0ff677c) entered blocking state Jun 12 23:04:18.869688 kernel: docker0: port 1(veth0ff677c) entered disabled state Jun 12 23:04:18.872889 kernel: veth0ff677c: entered allmulticast mode Jun 12 23:04:18.875745 kernel: veth0ff677c: entered promiscuous mode Jun 12 23:04:18.861000 audit: ANOM_PROMISCUOUS dev=veth0ff677c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:18.861000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b482120 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.861000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:18.879000 audit[10639]: NETFILTER_CFG table=raw:203 family=2 entries=1 op=nft_register_rule pid=10639 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:18.879000 audit[10639]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd0a394f0 a2=0 a3=0 items=0 ppid=2935 pid=10639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:18.879000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:18.881855 systemd-networkd[2176]: veth0ff677c: Link UP Jun 12 23:04:18.896796 kernel: eth0: renamed from vethaaa31e5 Jun 12 23:04:18.903895 kernel: docker0: port 1(veth0ff677c) entered blocking state Jun 12 23:04:18.903964 kernel: docker0: port 1(veth0ff677c) entered forwarding state Jun 12 23:04:18.904167 systemd-networkd[2176]: veth0ff677c: Gained carrier Jun 12 23:04:18.905538 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:19.533564 sshd[10633]: Connection closed by authenticating user root 43.160.253.60 port 60814 [preauth] Jun 12 23:04:19.533000 audit[10633]: AUDIT1109 pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:19.535485 systemd[1]: sshd@109-63-10.0.0.35:22-43.160.253.60:60814.service: Deactivated successfully. Jun 12 23:04:19.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@109-63-10.0.0.35:22-43.160.253.60:60814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:19.704279 systemd[1]: Started sshd@110-4144-10.0.0.35:22-43.160.253.60:60820.service - OpenSSH per-connection server daemon (43.160.253.60:60820). Jun 12 23:04:19.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-4144-10.0.0.35:22-43.160.253.60:60820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:19.929048 systemd[1]: docker-6b421ee7055d41f21063b6ba06365733eaa5a81b954dd3972d8053137f0eb7ac.scope: Deactivated successfully. Jun 12 23:04:19.942342 containerd[2455]: time="2026-06-12T23:04:19.942187795Z" level=info msg="shim disconnected" id=6b421ee7055d41f21063b6ba06365733eaa5a81b954dd3972d8053137f0eb7ac namespace=moby Jun 12 23:04:19.942342 containerd[2455]: time="2026-06-12T23:04:19.942218075Z" level=info msg="cleaning up after shim disconnected" id=6b421ee7055d41f21063b6ba06365733eaa5a81b954dd3972d8053137f0eb7ac namespace=moby Jun 12 23:04:19.942342 containerd[2455]: time="2026-06-12T23:04:19.942224657Z" level=info msg="cleaning up dead shim" id=6b421ee7055d41f21063b6ba06365733eaa5a81b954dd3972d8053137f0eb7ac namespace=moby Jun 12 23:04:19.964276 systemd-networkd[2176]: veth0ff677c: Lost carrier Jun 12 23:04:19.964794 kernel: docker0: port 1(veth0ff677c) entered disabled state Jun 12 23:04:19.968794 kernel: vethaaa31e5: renamed from eth0 Jun 12 23:04:19.979000 audit[10675]: NETFILTER_CFG table=raw:204 family=2 entries=1 op=nft_unregister_rule pid=10675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:19.979000 audit[10675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe9b07b60 a2=0 a3=0 items=0 ppid=2935 pid=10675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:19.979000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:19.984261 systemd-networkd[2176]: veth0ff677c: Link DOWN Jun 12 23:04:19.989816 kernel: docker0: port 1(veth0ff677c) entered disabled state Jun 12 23:04:19.999497 kernel: veth0ff677c (unregistering): left allmulticast mode Jun 12 23:04:19.999573 kernel: veth0ff677c (unregistering): left promiscuous mode Jun 12 23:04:19.983000 audit: ANOM_PROMISCUOUS dev=veth0ff677c prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:20.003403 kernel: docker0: port 1(veth0ff677c) entered disabled state Jun 12 23:04:19.983000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb0b00 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:19.983000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:20.015187 systemd[1]: run-docker-netns-73990f233a05.mount: Deactivated successfully. Jun 12 23:04:20.019806 systemd[1]: var-lib-docker-overlay2-73d2d1add37d7e665d3fc63580ec3f374088d0c1a10f91f4263b2102ac2744f8-merged.mount: Deactivated successfully. Jun 12 23:04:20.032000 audit: BPF prog-id=459 op=UNLOAD Jun 12 23:04:20.032000 audit: BPF prog-id=463 op=UNLOAD Jun 12 23:04:20.088925 systemd[1]: var-lib-docker-overlay2-a5a625c1cf8b26c0809f0a85c3ecca49ff025f7bbbc2b3d7b120dd29253e3597\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:20.170625 containerd[2455]: time="2026-06-12T23:04:20.170588748Z" level=info msg="connecting to shim c74e6a803a99f41110eddb472f3163e04629125f2ac801392408a5782d4322df" address="unix:///run/containerd/s/2fc87dbd270238bc323ee0a589f9083ef11cbcba5f461e348ac9ab4a7d21e55c" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:20.190939 systemd[1]: Started docker-c74e6a803a99f41110eddb472f3163e04629125f2ac801392408a5782d4322df.scope - libcontainer container c74e6a803a99f41110eddb472f3163e04629125f2ac801392408a5782d4322df. Jun 12 23:04:20.198000 audit: BPF prog-id=464 op=LOAD Jun 12 23:04:20.199000 audit: BPF prog-id=465 op=LOAD Jun 12 23:04:20.199000 audit[10705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=46a5dc163f80 a2=98 a3=0 items=0 ppid=10694 pid=10705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373465366138303361393966343131313065646462343732 Jun 12 23:04:20.199000 audit: BPF prog-id=465 op=UNLOAD Jun 12 23:04:20.199000 audit[10705]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10694 pid=10705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373465366138303361393966343131313065646462343732 Jun 12 23:04:20.199000 audit: BPF prog-id=466 op=LOAD Jun 12 23:04:20.199000 audit[10705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=46a5dc164258 a2=98 a3=0 items=0 ppid=10694 pid=10705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373465366138303361393966343131313065646462343732 Jun 12 23:04:20.199000 audit: BPF prog-id=467 op=LOAD Jun 12 23:04:20.199000 audit[10705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=46a5dc163f98 a2=98 a3=0 items=0 ppid=10694 pid=10705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373465366138303361393966343131313065646462343732 Jun 12 23:04:20.199000 audit: BPF prog-id=467 op=UNLOAD Jun 12 23:04:20.199000 audit[10705]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10694 pid=10705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373465366138303361393966343131313065646462343732 Jun 12 23:04:20.199000 audit: BPF prog-id=466 op=UNLOAD Jun 12 23:04:20.199000 audit[10705]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10694 pid=10705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373465366138303361393966343131313065646462343732 Jun 12 23:04:20.199000 audit: BPF prog-id=468 op=LOAD Jun 12 23:04:20.199000 audit[10705]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=46a5dc1644a8 a2=98 a3=0 items=0 ppid=10694 pid=10705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63373465366138303361393966343131313065646462343732 Jun 12 23:04:20.220076 kernel: docker0: port 1(veth7aabf0f) entered blocking state Jun 12 23:04:20.220168 kernel: docker0: port 1(veth7aabf0f) entered disabled state Jun 12 23:04:20.220709 sshd[10650]: Invalid user deploy from 43.160.253.60 port 60820 Jun 12 23:04:20.223460 kernel: veth7aabf0f: entered allmulticast mode Jun 12 23:04:20.226738 kernel: veth7aabf0f: entered promiscuous mode Jun 12 23:04:20.211000 audit: ANOM_PROMISCUOUS dev=veth7aabf0f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:20.211000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b483980 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:20.211000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:20.228638 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:20.229000 audit[10728]: NETFILTER_CFG table=raw:205 family=2 entries=1 op=nft_register_rule pid=10728 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:20.229000 audit[10728]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffff3415ae0 a2=0 a3=0 items=0 ppid=2935 pid=10728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:20.229000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:20.230743 systemd-networkd[2176]: veth7aabf0f: Link UP Jun 12 23:04:20.250314 kernel: eth0: renamed from veth8c082a2 Jun 12 23:04:20.250402 kernel: docker0: port 1(veth7aabf0f) entered blocking state Jun 12 23:04:20.253972 kernel: docker0: port 1(veth7aabf0f) entered forwarding state Jun 12 23:04:20.254259 systemd-networkd[2176]: veth7aabf0f: Gained carrier Jun 12 23:04:20.255489 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:20.385227 sshd[10650]: Connection closed by invalid user deploy 43.160.253.60 port 60820 [preauth] Jun 12 23:04:20.384000 audit[10650]: AUDIT1109 pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:20.389026 kernel: kauditd_printk_skb: 152 callbacks suppressed Jun 12 23:04:20.389075 kernel: audit: type=1109 audit(1781305460.384:1821): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:20.393075 systemd[1]: sshd@110-4144-10.0.0.35:22-43.160.253.60:60820.service: Deactivated successfully. Jun 12 23:04:20.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-4144-10.0.0.35:22-43.160.253.60:60820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:20.418896 kernel: audit: type=1131 audit(1781305460.393:1822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@110-4144-10.0.0.35:22-43.160.253.60:60820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:20.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-64-10.0.0.35:22-43.160.253.60:60828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:20.556043 systemd[1]: Started sshd@111-64-10.0.0.35:22-43.160.253.60:60828.service - OpenSSH per-connection server daemon (43.160.253.60:60828). Jun 12 23:04:20.570809 kernel: audit: type=1130 audit(1781305460.554:1823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-64-10.0.0.35:22-43.160.253.60:60828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:21.081360 sshd[10740]: Invalid user oracle from 43.160.253.60 port 60828 Jun 12 23:04:21.243147 sshd[10740]: Connection closed by invalid user oracle 43.160.253.60 port 60828 [preauth] Jun 12 23:04:21.241000 audit[10740]: AUDIT1109 pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:21.258061 systemd[1]: sshd@111-64-10.0.0.35:22-43.160.253.60:60828.service: Deactivated successfully. Jun 12 23:04:21.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-64-10.0.0.35:22-43.160.253.60:60828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:21.272163 kernel: audit: type=1109 audit(1781305461.241:1824): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:21.272242 kernel: audit: type=1131 audit(1781305461.256:1825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@111-64-10.0.0.35:22-43.160.253.60:60828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:21.278265 systemd[1]: docker-c74e6a803a99f41110eddb472f3163e04629125f2ac801392408a5782d4322df.scope: Deactivated successfully. Jun 12 23:04:21.290376 containerd[2455]: time="2026-06-12T23:04:21.290348646Z" level=info msg="shim disconnected" id=c74e6a803a99f41110eddb472f3163e04629125f2ac801392408a5782d4322df namespace=moby Jun 12 23:04:21.290680 dockerd[2935]: time="2026-06-12T23:04:21.290430602Z" level=info msg="ignoring event" container=c74e6a803a99f41110eddb472f3163e04629125f2ac801392408a5782d4322df module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:21.291527 containerd[2455]: time="2026-06-12T23:04:21.291016188Z" level=info msg="cleaning up after shim disconnected" id=c74e6a803a99f41110eddb472f3163e04629125f2ac801392408a5782d4322df namespace=moby Jun 12 23:04:21.291527 containerd[2455]: time="2026-06-12T23:04:21.291036211Z" level=info msg="cleaning up dead shim" id=c74e6a803a99f41110eddb472f3163e04629125f2ac801392408a5782d4322df namespace=moby Jun 12 23:04:21.311704 systemd-networkd[2176]: veth7aabf0f: Lost carrier Jun 12 23:04:21.312007 kernel: docker0: port 1(veth7aabf0f) entered disabled state Jun 12 23:04:21.315799 kernel: veth8c082a2: renamed from eth0 Jun 12 23:04:21.330000 audit[10769]: NETFILTER_CFG table=raw:206 family=2 entries=1 op=nft_unregister_rule pid=10769 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:21.330000 audit[10769]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdce44380 a2=0 a3=0 items=0 ppid=2935 pid=10769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.358796 kernel: audit: type=1325 audit(1781305461.330:1826): table=raw:206 family=2 entries=1 op=nft_unregister_rule pid=10769 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:21.358883 kernel: audit: type=1300 audit(1781305461.330:1826): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdce44380 a2=0 a3=0 items=0 ppid=2935 pid=10769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.359515 systemd-networkd[2176]: veth7aabf0f: Gained IPv6LL Jun 12 23:04:21.330000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:21.370748 kernel: audit: type=1327 audit(1781305461.330:1826): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:21.371452 systemd-networkd[2176]: veth7aabf0f: Link DOWN Jun 12 23:04:21.373785 kernel: docker0: port 1(veth7aabf0f) entered disabled state Jun 12 23:04:21.378790 kernel: veth7aabf0f (unregistering): left allmulticast mode Jun 12 23:04:21.382452 kernel: veth7aabf0f (unregistering): left promiscuous mode Jun 12 23:04:21.358000 audit: ANOM_PROMISCUOUS dev=veth7aabf0f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:21.387889 kernel: docker0: port 1(veth7aabf0f) entered disabled state Jun 12 23:04:21.387915 kernel: audit: type=1700 audit(1781305461.358:1827): dev=veth7aabf0f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:21.358000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb1d40 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.358000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:21.418804 kernel: audit: type=1300 audit(1781305461.358:1827): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb1d40 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.425595 systemd[1]: run-docker-netns-6f46e5fd0b1c.mount: Deactivated successfully. Jun 12 23:04:21.426444 systemd[1]: var-lib-docker-overlay2-a5a625c1cf8b26c0809f0a85c3ecca49ff025f7bbbc2b3d7b120dd29253e3597-merged.mount: Deactivated successfully. Jun 12 23:04:21.428635 systemd[1]: Started sshd@112-4145-10.0.0.35:22-43.160.253.60:60830.service - OpenSSH per-connection server daemon (43.160.253.60:60830). Jun 12 23:04:21.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-4145-10.0.0.35:22-43.160.253.60:60830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:21.430000 audit: BPF prog-id=464 op=UNLOAD Jun 12 23:04:21.430000 audit: BPF prog-id=468 op=UNLOAD Jun 12 23:04:21.529210 systemd[1]: var-lib-docker-overlay2-b8cb5ac61ce7e8ff198c678b034f0c393fdafc560d9908d03011a13be0ef1309\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:21.598260 containerd[2455]: time="2026-06-12T23:04:21.597512170Z" level=info msg="connecting to shim d2d8228cd744f163624f6a3f2b08f4014031b8642d73b9ac5c15fd6eb744f8e7" address="unix:///run/containerd/s/ee10406f4f5349fe92486d07b243c4344f2436992f30257b175b65cc1501776c" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:21.613952 systemd[1]: Started docker-d2d8228cd744f163624f6a3f2b08f4014031b8642d73b9ac5c15fd6eb744f8e7.scope - libcontainer container d2d8228cd744f163624f6a3f2b08f4014031b8642d73b9ac5c15fd6eb744f8e7. Jun 12 23:04:21.621000 audit: BPF prog-id=469 op=LOAD Jun 12 23:04:21.622000 audit: BPF prog-id=470 op=LOAD Jun 12 23:04:21.622000 audit[10804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7f5e89ab7f80 a2=98 a3=0 items=0 ppid=10791 pid=10804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64326438323238636437343466313633363234663661336632 Jun 12 23:04:21.622000 audit: BPF prog-id=470 op=UNLOAD Jun 12 23:04:21.622000 audit[10804]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10791 pid=10804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64326438323238636437343466313633363234663661336632 Jun 12 23:04:21.623000 audit: BPF prog-id=471 op=LOAD Jun 12 23:04:21.623000 audit[10804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7f5e89ab8258 a2=98 a3=0 items=0 ppid=10791 pid=10804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64326438323238636437343466313633363234663661336632 Jun 12 23:04:21.623000 audit: BPF prog-id=472 op=LOAD Jun 12 23:04:21.623000 audit[10804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7f5e89ab7f98 a2=98 a3=0 items=0 ppid=10791 pid=10804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64326438323238636437343466313633363234663661336632 Jun 12 23:04:21.623000 audit: BPF prog-id=472 op=UNLOAD Jun 12 23:04:21.623000 audit[10804]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=10791 pid=10804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64326438323238636437343466313633363234663661336632 Jun 12 23:04:21.623000 audit: BPF prog-id=471 op=UNLOAD Jun 12 23:04:21.623000 audit[10804]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=10791 pid=10804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64326438323238636437343466313633363234663661336632 Jun 12 23:04:21.623000 audit: BPF prog-id=473 op=LOAD Jun 12 23:04:21.623000 audit[10804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7f5e89ab84a8 a2=98 a3=0 items=0 ppid=10791 pid=10804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64326438323238636437343466313633363234663661336632 Jun 12 23:04:21.641200 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:21.644803 kernel: docker0: port 1(veth2ff1877) entered blocking state Jun 12 23:04:21.644890 kernel: docker0: port 1(veth2ff1877) entered disabled state Jun 12 23:04:21.644912 kernel: veth2ff1877: entered allmulticast mode Jun 12 23:04:21.649977 kernel: veth2ff1877: entered promiscuous mode Jun 12 23:04:21.636000 audit: ANOM_PROMISCUOUS dev=veth2ff1877 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:21.636000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52ed20 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.636000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:21.651000 audit[10825]: NETFILTER_CFG table=raw:207 family=2 entries=1 op=nft_register_rule pid=10825 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:21.651000 audit[10825]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdf6e96f0 a2=0 a3=0 items=0 ppid=2935 pid=10825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:21.651000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:21.652681 systemd-networkd[2176]: veth2ff1877: Link UP Jun 12 23:04:21.668933 kernel: eth0: renamed from vethe60cb38 Jun 12 23:04:21.669013 kernel: docker0: port 1(veth2ff1877) entered blocking state Jun 12 23:04:21.672449 kernel: docker0: port 1(veth2ff1877) entered forwarding state Jun 12 23:04:21.672883 systemd-networkd[2176]: veth2ff1877: Gained carrier Jun 12 23:04:21.673148 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:21.936436 sshd[10771]: Invalid user default from 43.160.253.60 port 60830 Jun 12 23:04:22.097347 sshd[10771]: Connection closed by invalid user default 43.160.253.60 port 60830 [preauth] Jun 12 23:04:22.097000 audit[10771]: AUDIT1109 pid=10771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:22.099470 systemd[1]: sshd@112-4145-10.0.0.35:22-43.160.253.60:60830.service: Deactivated successfully. Jun 12 23:04:22.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@112-4145-10.0.0.35:22-43.160.253.60:60830 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:22.269746 systemd[1]: Started sshd@113-65-10.0.0.35:22-43.160.253.60:60838.service - OpenSSH per-connection server daemon (43.160.253.60:60838). Jun 12 23:04:22.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-65-10.0.0.35:22-43.160.253.60:60838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:22.698714 systemd[1]: docker-d2d8228cd744f163624f6a3f2b08f4014031b8642d73b9ac5c15fd6eb744f8e7.scope: Deactivated successfully. Jun 12 23:04:22.710924 dockerd[2935]: time="2026-06-12T23:04:22.710865975Z" level=info msg="ignoring event" container=d2d8228cd744f163624f6a3f2b08f4014031b8642d73b9ac5c15fd6eb744f8e7 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:22.711293 containerd[2455]: time="2026-06-12T23:04:22.710987865Z" level=info msg="shim disconnected" id=d2d8228cd744f163624f6a3f2b08f4014031b8642d73b9ac5c15fd6eb744f8e7 namespace=moby Jun 12 23:04:22.711293 containerd[2455]: time="2026-06-12T23:04:22.711013975Z" level=info msg="cleaning up after shim disconnected" id=d2d8228cd744f163624f6a3f2b08f4014031b8642d73b9ac5c15fd6eb744f8e7 namespace=moby Jun 12 23:04:22.711293 containerd[2455]: time="2026-06-12T23:04:22.711019383Z" level=info msg="cleaning up dead shim" id=d2d8228cd744f163624f6a3f2b08f4014031b8642d73b9ac5c15fd6eb744f8e7 namespace=moby Jun 12 23:04:22.733127 systemd-networkd[2176]: veth2ff1877: Lost carrier Jun 12 23:04:22.734773 kernel: docker0: port 1(veth2ff1877) entered disabled state Jun 12 23:04:22.734826 kernel: vethe60cb38: renamed from eth0 Jun 12 23:04:22.748000 audit[10862]: NETFILTER_CFG table=raw:208 family=2 entries=1 op=nft_unregister_rule pid=10862 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:22.748000 audit[10862]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcbac2590 a2=0 a3=0 items=0 ppid=2935 pid=10862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:22.748000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:22.753870 systemd-networkd[2176]: veth2ff1877: Link DOWN Jun 12 23:04:22.756862 kernel: docker0: port 1(veth2ff1877) entered disabled state Jun 12 23:04:22.764948 kernel: veth2ff1877 (unregistering): left allmulticast mode Jun 12 23:04:22.765013 kernel: veth2ff1877 (unregistering): left promiscuous mode Jun 12 23:04:22.752000 audit: ANOM_PROMISCUOUS dev=veth2ff1877 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:22.768630 kernel: docker0: port 1(veth2ff1877) entered disabled state Jun 12 23:04:22.752000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b4f1dc0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:22.752000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:22.782086 systemd[1]: run-docker-netns-964f4eb0e6b2.mount: Deactivated successfully. Jun 12 23:04:22.785444 systemd[1]: var-lib-docker-overlay2-b8cb5ac61ce7e8ff198c678b034f0c393fdafc560d9908d03011a13be0ef1309-merged.mount: Deactivated successfully. Jun 12 23:04:22.799000 audit: BPF prog-id=469 op=UNLOAD Jun 12 23:04:22.799000 audit: BPF prog-id=473 op=UNLOAD Jun 12 23:04:22.894997 systemd[1]: var-lib-docker-overlay2-c9986d42c8945698401cfbdcd0af2641773781fa0436fa70397601eb4afc9cbc\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:22.944153 sshd[10836]: Connection closed by authenticating user root 43.160.253.60 port 60838 [preauth] Jun 12 23:04:22.943000 audit[10836]: AUDIT1109 pid=10836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:22.946357 systemd[1]: sshd@113-65-10.0.0.35:22-43.160.253.60:60838.service: Deactivated successfully. Jun 12 23:04:22.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@113-65-10.0.0.35:22-43.160.253.60:60838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:22.978164 containerd[2455]: time="2026-06-12T23:04:22.978129875Z" level=info msg="connecting to shim 9747ec468d2d1d888343daa9d1cc95d7c0cb98a97abc17d9619e5bf62f22cd30" address="unix:///run/containerd/s/f6edeaf176388b97a3ec91246749f1e42f0c174794a9c9e35b34b42794042b40" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:22.998959 systemd[1]: Started docker-9747ec468d2d1d888343daa9d1cc95d7c0cb98a97abc17d9619e5bf62f22cd30.scope - libcontainer container 9747ec468d2d1d888343daa9d1cc95d7c0cb98a97abc17d9619e5bf62f22cd30. Jun 12 23:04:23.006000 audit: BPF prog-id=474 op=LOAD Jun 12 23:04:23.006000 audit: BPF prog-id=475 op=LOAD Jun 12 23:04:23.006000 audit[10893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=49de378e1f80 a2=98 a3=0 items=0 ppid=10881 pid=10893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:23.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373437656334363864326431643838383334336461613964 Jun 12 23:04:23.006000 audit: BPF prog-id=475 op=UNLOAD Jun 12 23:04:23.006000 audit[10893]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10881 pid=10893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:23.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373437656334363864326431643838383334336461613964 Jun 12 23:04:23.006000 audit: BPF prog-id=476 op=LOAD Jun 12 23:04:23.006000 audit[10893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=49de378e2258 a2=98 a3=0 items=0 ppid=10881 pid=10893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:23.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373437656334363864326431643838383334336461613964 Jun 12 23:04:23.007000 audit: BPF prog-id=477 op=LOAD Jun 12 23:04:23.007000 audit[10893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=49de378e1f98 a2=98 a3=0 items=0 ppid=10881 pid=10893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:23.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373437656334363864326431643838383334336461613964 Jun 12 23:04:23.007000 audit: BPF prog-id=477 op=UNLOAD Jun 12 23:04:23.007000 audit[10893]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=10881 pid=10893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:23.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373437656334363864326431643838383334336461613964 Jun 12 23:04:23.007000 audit: BPF prog-id=476 op=UNLOAD Jun 12 23:04:23.007000 audit[10893]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10881 pid=10893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:23.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373437656334363864326431643838383334336461613964 Jun 12 23:04:23.007000 audit: BPF prog-id=478 op=LOAD Jun 12 23:04:23.007000 audit[10893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=49de378e24a8 a2=98 a3=0 items=0 ppid=10881 pid=10893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:23.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39373437656334363864326431643838383334336461613964 Jun 12 23:04:23.021399 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:23.031799 kernel: docker0: port 1(veth1476e18) entered blocking state Jun 12 23:04:23.031873 kernel: docker0: port 1(veth1476e18) entered disabled state Jun 12 23:04:23.031896 kernel: veth1476e18: entered allmulticast mode Jun 12 23:04:23.036568 kernel: veth1476e18: entered promiscuous mode Jun 12 23:04:23.020000 audit: ANOM_PROMISCUOUS dev=veth1476e18 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:23.020000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b2419e0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:23.020000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:23.038000 audit[10914]: NETFILTER_CFG table=raw:209 family=2 entries=1 op=nft_register_rule pid=10914 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:23.038000 audit[10914]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffff380280 a2=0 a3=0 items=0 ppid=2935 pid=10914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:23.038000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:23.039822 systemd-networkd[2176]: veth1476e18: Link UP Jun 12 23:04:23.057782 kernel: eth0: renamed from veth2efd30e Jun 12 23:04:23.057838 kernel: docker0: port 1(veth1476e18) entered blocking state Jun 12 23:04:23.057854 kernel: docker0: port 1(veth1476e18) entered forwarding state Jun 12 23:04:23.062258 systemd-networkd[2176]: veth1476e18: Gained carrier Jun 12 23:04:23.062901 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:23.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-4146-10.0.0.35:22-43.160.253.60:60850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:23.115296 systemd[1]: Started sshd@114-4146-10.0.0.35:22-43.160.253.60:60850.service - OpenSSH per-connection server daemon (43.160.253.60:60850). Jun 12 23:04:23.626314 sshd[10923]: Invalid user es from 43.160.253.60 port 60850 Jun 12 23:04:23.788329 sshd[10923]: Connection closed by invalid user es 43.160.253.60 port 60850 [preauth] Jun 12 23:04:23.787000 audit[10923]: AUDIT1109 pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:23.789827 systemd[1]: sshd@114-4146-10.0.0.35:22-43.160.253.60:60850.service: Deactivated successfully. Jun 12 23:04:23.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@114-4146-10.0.0.35:22-43.160.253.60:60850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:23.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-4147-10.0.0.35:22-43.160.253.60:60866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:23.959443 systemd[1]: Started sshd@115-4147-10.0.0.35:22-43.160.253.60:60866.service - OpenSSH per-connection server daemon (43.160.253.60:60866). Jun 12 23:04:24.089150 systemd[1]: docker-9747ec468d2d1d888343daa9d1cc95d7c0cb98a97abc17d9619e5bf62f22cd30.scope: Deactivated successfully. Jun 12 23:04:24.100183 containerd[2455]: time="2026-06-12T23:04:24.100139086Z" level=info msg="shim disconnected" id=9747ec468d2d1d888343daa9d1cc95d7c0cb98a97abc17d9619e5bf62f22cd30 namespace=moby Jun 12 23:04:24.100183 containerd[2455]: time="2026-06-12T23:04:24.100177812Z" level=info msg="cleaning up after shim disconnected" id=9747ec468d2d1d888343daa9d1cc95d7c0cb98a97abc17d9619e5bf62f22cd30 namespace=moby Jun 12 23:04:24.100183 containerd[2455]: time="2026-06-12T23:04:24.100184388Z" level=info msg="cleaning up dead shim" id=9747ec468d2d1d888343daa9d1cc95d7c0cb98a97abc17d9619e5bf62f22cd30 namespace=moby Jun 12 23:04:24.101323 dockerd[2935]: time="2026-06-12T23:04:24.101240447Z" level=info msg="ignoring event" container=9747ec468d2d1d888343daa9d1cc95d7c0cb98a97abc17d9619e5bf62f22cd30 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:24.129564 systemd-networkd[2176]: veth1476e18: Lost carrier Jun 12 23:04:24.129951 kernel: docker0: port 1(veth1476e18) entered disabled state Jun 12 23:04:24.132805 kernel: veth2efd30e: renamed from eth0 Jun 12 23:04:24.147000 audit[10954]: NETFILTER_CFG table=raw:210 family=2 entries=1 op=nft_unregister_rule pid=10954 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:24.147000 audit[10954]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc8f9e570 a2=0 a3=0 items=0 ppid=2935 pid=10954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.147000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:24.154221 systemd-networkd[2176]: veth1476e18: Link DOWN Jun 12 23:04:24.158791 kernel: docker0: port 1(veth1476e18) entered disabled state Jun 12 23:04:24.165713 kernel: veth1476e18 (unregistering): left allmulticast mode Jun 12 23:04:24.165771 kernel: veth1476e18 (unregistering): left promiscuous mode Jun 12 23:04:24.153000 audit: ANOM_PROMISCUOUS dev=veth1476e18 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:24.169545 kernel: docker0: port 1(veth1476e18) entered disabled state Jun 12 23:04:24.153000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b23c160 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.153000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:24.187015 systemd[1]: run-docker-netns-3c94226fcf33.mount: Deactivated successfully. Jun 12 23:04:24.190304 systemd[1]: var-lib-docker-overlay2-c9986d42c8945698401cfbdcd0af2641773781fa0436fa70397601eb4afc9cbc-merged.mount: Deactivated successfully. Jun 12 23:04:24.198000 audit: BPF prog-id=474 op=UNLOAD Jun 12 23:04:24.198000 audit: BPF prog-id=478 op=UNLOAD Jun 12 23:04:24.302937 systemd[1]: var-lib-docker-overlay2-dbdfa9500bf992795a0e4aff4b8cbae08f45f90ab1fe6f17cbc64c0198568642\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:24.368678 containerd[2455]: time="2026-06-12T23:04:24.368578928Z" level=info msg="connecting to shim 23964b7a6d76b0f6b3ad2fa2206b24d72d063024dec8ba2bdcc38bfda8a65aa9" address="unix:///run/containerd/s/293e48b26195541368186eb803f7dc6603fe07d6142799345dadb4e165ef3d98" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:24.390145 systemd[1]: Started docker-23964b7a6d76b0f6b3ad2fa2206b24d72d063024dec8ba2bdcc38bfda8a65aa9.scope - libcontainer container 23964b7a6d76b0f6b3ad2fa2206b24d72d063024dec8ba2bdcc38bfda8a65aa9. Jun 12 23:04:24.398000 audit: BPF prog-id=479 op=LOAD Jun 12 23:04:24.399000 audit: BPF prog-id=480 op=LOAD Jun 12 23:04:24.399000 audit[10983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=6ec5af341f80 a2=98 a3=0 items=0 ppid=10971 pid=10983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333936346237613664373662306636623361643266613232 Jun 12 23:04:24.399000 audit: BPF prog-id=480 op=UNLOAD Jun 12 23:04:24.399000 audit[10983]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10971 pid=10983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333936346237613664373662306636623361643266613232 Jun 12 23:04:24.399000 audit: BPF prog-id=481 op=LOAD Jun 12 23:04:24.399000 audit[10983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=6ec5af342258 a2=98 a3=0 items=0 ppid=10971 pid=10983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333936346237613664373662306636623361643266613232 Jun 12 23:04:24.399000 audit: BPF prog-id=482 op=LOAD Jun 12 23:04:24.399000 audit[10983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=6ec5af341f98 a2=98 a3=0 items=0 ppid=10971 pid=10983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333936346237613664373662306636623361643266613232 Jun 12 23:04:24.399000 audit: BPF prog-id=482 op=UNLOAD Jun 12 23:04:24.399000 audit[10983]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=10971 pid=10983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333936346237613664373662306636623361643266613232 Jun 12 23:04:24.400000 audit: BPF prog-id=481 op=UNLOAD Jun 12 23:04:24.400000 audit[10983]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=10971 pid=10983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333936346237613664373662306636623361643266613232 Jun 12 23:04:24.400000 audit: BPF prog-id=483 op=LOAD Jun 12 23:04:24.400000 audit[10983]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=6ec5af3424a8 a2=98 a3=0 items=0 ppid=10971 pid=10983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32333936346237613664373662306636623361643266613232 Jun 12 23:04:24.411396 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:24.417856 kernel: docker0: port 1(vethdd93bca) entered blocking state Jun 12 23:04:24.417926 kernel: docker0: port 1(vethdd93bca) entered disabled state Jun 12 23:04:24.420919 kernel: vethdd93bca: entered allmulticast mode Jun 12 23:04:24.423868 kernel: vethdd93bca: entered promiscuous mode Jun 12 23:04:24.410000 audit: ANOM_PROMISCUOUS dev=vethdd93bca prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:24.410000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b944960 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.410000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:24.425000 audit[11004]: NETFILTER_CFG table=raw:211 family=2 entries=1 op=nft_register_rule pid=11004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:24.425000 audit[11004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc08b0e60 a2=0 a3=0 items=0 ppid=2935 pid=11004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:24.425000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:24.427173 systemd-networkd[2176]: vethdd93bca: Link UP Jun 12 23:04:24.447783 kernel: eth0: renamed from veth38ddb0c Jun 12 23:04:24.447862 kernel: docker0: port 1(vethdd93bca) entered blocking state Jun 12 23:04:24.447882 kernel: docker0: port 1(vethdd93bca) entered forwarding state Jun 12 23:04:24.448827 systemd-networkd[2176]: vethdd93bca: Gained carrier Jun 12 23:04:24.449155 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:24.473630 sshd[10929]: Invalid user test from 43.160.253.60 port 60866 Jun 12 23:04:24.635161 sshd[10929]: Connection closed by invalid user test 43.160.253.60 port 60866 [preauth] Jun 12 23:04:24.634000 audit[10929]: AUDIT1109 pid=10929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:24.637476 systemd[1]: sshd@115-4147-10.0.0.35:22-43.160.253.60:60866.service: Deactivated successfully. Jun 12 23:04:24.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@115-4147-10.0.0.35:22-43.160.253.60:60866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:24.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-4148-10.0.0.35:22-43.160.253.60:60872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:24.813031 systemd[1]: Started sshd@116-4148-10.0.0.35:22-43.160.253.60:60872.service - OpenSSH per-connection server daemon (43.160.253.60:60872). Jun 12 23:04:25.326873 sshd[11015]: Invalid user steam from 43.160.253.60 port 60872 Jun 12 23:04:25.476340 systemd[1]: docker-23964b7a6d76b0f6b3ad2fa2206b24d72d063024dec8ba2bdcc38bfda8a65aa9.scope: Deactivated successfully. Jun 12 23:04:25.488940 sshd[11015]: Connection closed by invalid user steam 43.160.253.60 port 60872 [preauth] Jun 12 23:04:25.488000 audit[11015]: AUDIT1109 pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:25.497393 systemd[1]: sshd@116-4148-10.0.0.35:22-43.160.253.60:60872.service: Deactivated successfully. Jun 12 23:04:25.500037 kernel: kauditd_printk_skb: 116 callbacks suppressed Jun 12 23:04:25.500093 containerd[2455]: time="2026-06-12T23:04:25.490435874Z" level=info msg="shim disconnected" id=23964b7a6d76b0f6b3ad2fa2206b24d72d063024dec8ba2bdcc38bfda8a65aa9 namespace=moby Jun 12 23:04:25.500093 containerd[2455]: time="2026-06-12T23:04:25.490482608Z" level=info msg="cleaning up after shim disconnected" id=23964b7a6d76b0f6b3ad2fa2206b24d72d063024dec8ba2bdcc38bfda8a65aa9 namespace=moby Jun 12 23:04:25.500093 containerd[2455]: time="2026-06-12T23:04:25.490490879Z" level=info msg="cleaning up dead shim" id=23964b7a6d76b0f6b3ad2fa2206b24d72d063024dec8ba2bdcc38bfda8a65aa9 namespace=moby Jun 12 23:04:25.500354 dockerd[2935]: time="2026-06-12T23:04:25.490152464Z" level=info msg="ignoring event" container=23964b7a6d76b0f6b3ad2fa2206b24d72d063024dec8ba2bdcc38bfda8a65aa9 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:25.500515 kernel: audit: type=1109 audit(1781305465.488:1881): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:25.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-4148-10.0.0.35:22-43.160.253.60:60872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:25.520389 kernel: audit: type=1131 audit(1781305465.492:1882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@116-4148-10.0.0.35:22-43.160.253.60:60872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:25.537639 systemd-networkd[2176]: vethdd93bca: Lost carrier Jun 12 23:04:25.538227 kernel: docker0: port 1(vethdd93bca) entered disabled state Jun 12 23:04:25.540820 kernel: veth38ddb0c: renamed from eth0 Jun 12 23:04:25.552000 audit[11042]: NETFILTER_CFG table=raw:212 family=2 entries=1 op=nft_unregister_rule pid=11042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:25.552000 audit[11042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd0803d80 a2=0 a3=0 items=0 ppid=2935 pid=11042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.578635 kernel: audit: type=1325 audit(1781305465.552:1883): table=raw:212 family=2 entries=1 op=nft_unregister_rule pid=11042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:25.578683 kernel: audit: type=1300 audit(1781305465.552:1883): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd0803d80 a2=0 a3=0 items=0 ppid=2935 pid=11042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.552000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:25.590248 kernel: audit: type=1327 audit(1781305465.552:1883): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:25.590827 systemd-networkd[2176]: vethdd93bca: Link DOWN Jun 12 23:04:25.598151 kernel: docker0: port 1(vethdd93bca) entered disabled state Jun 12 23:04:25.598204 kernel: vethdd93bca (unregistering): left allmulticast mode Jun 12 23:04:25.601959 kernel: vethdd93bca (unregistering): left promiscuous mode Jun 12 23:04:25.578000 audit: ANOM_PROMISCUOUS dev=vethdd93bca prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:25.606746 kernel: docker0: port 1(vethdd93bca) entered disabled state Jun 12 23:04:25.606770 kernel: audit: type=1700 audit(1781305465.578:1884): dev=vethdd93bca prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:25.578000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb31660 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.578000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:25.648787 kernel: audit: type=1300 audit(1781305465.578:1884): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb31660 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.648858 kernel: audit: type=1327 audit(1781305465.578:1884): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:25.650755 systemd[1]: run-docker-netns-ac38c3e27171.mount: Deactivated successfully. Jun 12 23:04:25.661262 systemd[1]: var-lib-docker-overlay2-dbdfa9500bf992795a0e4aff4b8cbae08f45f90ab1fe6f17cbc64c0198568642-merged.mount: Deactivated successfully. Jun 12 23:04:25.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-66-10.0.0.35:22-43.160.253.60:43786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:25.664560 systemd[1]: Started sshd@117-66-10.0.0.35:22-43.160.253.60:43786.service - OpenSSH per-connection server daemon (43.160.253.60:43786). Jun 12 23:04:25.679000 audit: BPF prog-id=479 op=UNLOAD Jun 12 23:04:25.684432 kernel: audit: type=1130 audit(1781305465.663:1885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-66-10.0.0.35:22-43.160.253.60:43786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:25.679000 audit: BPF prog-id=483 op=UNLOAD Jun 12 23:04:25.685771 kernel: audit: type=1334 audit(1781305465.679:1886): prog-id=479 op=UNLOAD Jun 12 23:04:25.793568 systemd[1]: var-lib-docker-overlay2-82fe53bf92962993ab23fc4bdf3b90a32c7f17a2e7eecb204bb09ae02fdd0dda\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:25.868879 containerd[2455]: time="2026-06-12T23:04:25.868422080Z" level=info msg="connecting to shim 5fccbdc187841dcee61e4c326d5b3f4e23cae3b82cd3f7f85de1c46b72b3ce49" address="unix:///run/containerd/s/0fcb8f33c4fb8f438d8b625090cb5c84543bb98b654b3a34ca83ee5e2b25e065" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:25.888934 systemd[1]: Started docker-5fccbdc187841dcee61e4c326d5b3f4e23cae3b82cd3f7f85de1c46b72b3ce49.scope - libcontainer container 5fccbdc187841dcee61e4c326d5b3f4e23cae3b82cd3f7f85de1c46b72b3ce49. Jun 12 23:04:25.897000 audit: BPF prog-id=484 op=LOAD Jun 12 23:04:25.897000 audit: BPF prog-id=485 op=LOAD Jun 12 23:04:25.897000 audit[11074]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=8eea7dc7f80 a2=98 a3=0 items=0 ppid=11063 pid=11074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666363626463313837383431646365653631653463333236 Jun 12 23:04:25.897000 audit: BPF prog-id=485 op=UNLOAD Jun 12 23:04:25.897000 audit[11074]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11063 pid=11074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666363626463313837383431646365653631653463333236 Jun 12 23:04:25.897000 audit: BPF prog-id=486 op=LOAD Jun 12 23:04:25.897000 audit[11074]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=8eea7dc8258 a2=98 a3=0 items=0 ppid=11063 pid=11074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666363626463313837383431646365653631653463333236 Jun 12 23:04:25.897000 audit: BPF prog-id=487 op=LOAD Jun 12 23:04:25.897000 audit[11074]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=8eea7dc7f98 a2=98 a3=0 items=0 ppid=11063 pid=11074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666363626463313837383431646365653631653463333236 Jun 12 23:04:25.897000 audit: BPF prog-id=487 op=UNLOAD Jun 12 23:04:25.897000 audit[11074]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11063 pid=11074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666363626463313837383431646365653631653463333236 Jun 12 23:04:25.897000 audit: BPF prog-id=486 op=UNLOAD Jun 12 23:04:25.897000 audit[11074]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11063 pid=11074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666363626463313837383431646365653631653463333236 Jun 12 23:04:25.897000 audit: BPF prog-id=488 op=LOAD Jun 12 23:04:25.897000 audit[11074]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=8eea7dc84a8 a2=98 a3=0 items=0 ppid=11063 pid=11074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35666363626463313837383431646365653631653463333236 Jun 12 23:04:25.916888 kernel: docker0: port 1(vethdfa6581) entered blocking state Jun 12 23:04:25.916965 kernel: docker0: port 1(vethdfa6581) entered disabled state Jun 12 23:04:25.919721 kernel: vethdfa6581: entered allmulticast mode Jun 12 23:04:25.922500 kernel: vethdfa6581: entered promiscuous mode Jun 12 23:04:25.908000 audit: ANOM_PROMISCUOUS dev=vethdfa6581 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:25.908000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760bc30630 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.908000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:25.924353 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:25.926000 audit[11095]: NETFILTER_CFG table=raw:213 family=2 entries=1 op=nft_register_rule pid=11095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:25.926000 audit[11095]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd3688fe0 a2=0 a3=0 items=0 ppid=2935 pid=11095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:25.926000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:25.929763 systemd-networkd[2176]: vethdfa6581: Link UP Jun 12 23:04:25.950255 kernel: eth0: renamed from veth2a638d2 Jun 12 23:04:25.950340 kernel: docker0: port 1(vethdfa6581) entered blocking state Jun 12 23:04:25.953803 kernel: docker0: port 1(vethdfa6581) entered forwarding state Jun 12 23:04:25.954575 systemd-networkd[2176]: vethdfa6581: Gained carrier Jun 12 23:04:25.954773 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:26.188652 sshd[11044]: Invalid user kali from 43.160.253.60 port 43786 Jun 12 23:04:26.349942 sshd[11044]: Connection closed by invalid user kali 43.160.253.60 port 43786 [preauth] Jun 12 23:04:26.349000 audit[11044]: AUDIT1109 pid=11044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:26.351843 systemd[1]: sshd@117-66-10.0.0.35:22-43.160.253.60:43786.service: Deactivated successfully. Jun 12 23:04:26.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@117-66-10.0.0.35:22-43.160.253.60:43786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:26.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-4149-10.0.0.35:22-43.160.253.60:43796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:26.521052 systemd[1]: Started sshd@118-4149-10.0.0.35:22-43.160.253.60:43796.service - OpenSSH per-connection server daemon (43.160.253.60:43796). Jun 12 23:04:26.979014 systemd-networkd[2176]: vethdfa6581: Gained IPv6LL Jun 12 23:04:26.979569 systemd[1]: docker-5fccbdc187841dcee61e4c326d5b3f4e23cae3b82cd3f7f85de1c46b72b3ce49.scope: Deactivated successfully. Jun 12 23:04:26.991382 containerd[2455]: time="2026-06-12T23:04:26.991349372Z" level=info msg="shim disconnected" id=5fccbdc187841dcee61e4c326d5b3f4e23cae3b82cd3f7f85de1c46b72b3ce49 namespace=moby Jun 12 23:04:26.991382 containerd[2455]: time="2026-06-12T23:04:26.991379532Z" level=info msg="cleaning up after shim disconnected" id=5fccbdc187841dcee61e4c326d5b3f4e23cae3b82cd3f7f85de1c46b72b3ce49 namespace=moby Jun 12 23:04:26.991678 containerd[2455]: time="2026-06-12T23:04:26.991387682Z" level=info msg="cleaning up dead shim" id=5fccbdc187841dcee61e4c326d5b3f4e23cae3b82cd3f7f85de1c46b72b3ce49 namespace=moby Jun 12 23:04:26.993432 dockerd[2935]: time="2026-06-12T23:04:26.993390660Z" level=info msg="ignoring event" container=5fccbdc187841dcee61e4c326d5b3f4e23cae3b82cd3f7f85de1c46b72b3ce49 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:27.013793 kernel: docker0: port 1(vethdfa6581) entered disabled state Jun 12 23:04:27.013867 kernel: veth2a638d2: renamed from eth0 Jun 12 23:04:27.014002 systemd-networkd[2176]: vethdfa6581: Lost carrier Jun 12 23:04:27.030000 audit[11132]: NETFILTER_CFG table=raw:214 family=2 entries=1 op=nft_unregister_rule pid=11132 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:27.030000 audit[11132]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd9513660 a2=0 a3=0 items=0 ppid=2935 pid=11132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.030000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:27.032656 sshd[11107]: Invalid user ubnt from 43.160.253.60 port 43796 Jun 12 23:04:27.035190 systemd-networkd[2176]: vethdfa6581: Link DOWN Jun 12 23:04:27.042428 kernel: docker0: port 1(vethdfa6581) entered disabled state Jun 12 23:04:27.042492 kernel: vethdfa6581 (unregistering): left allmulticast mode Jun 12 23:04:27.046316 kernel: vethdfa6581 (unregistering): left promiscuous mode Jun 12 23:04:27.034000 audit: ANOM_PROMISCUOUS dev=vethdfa6581 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:27.050114 kernel: docker0: port 1(vethdfa6581) entered disabled state Jun 12 23:04:27.034000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ff840 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.034000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:27.057968 systemd[1]: run-docker-netns-62ed3ddafe37.mount: Deactivated successfully. Jun 12 23:04:27.060666 systemd[1]: var-lib-docker-overlay2-82fe53bf92962993ab23fc4bdf3b90a32c7f17a2e7eecb204bb09ae02fdd0dda-merged.mount: Deactivated successfully. Jun 12 23:04:27.068000 audit: BPF prog-id=484 op=UNLOAD Jun 12 23:04:27.068000 audit: BPF prog-id=488 op=UNLOAD Jun 12 23:04:27.149409 systemd[1]: var-lib-docker-overlay2-e9563feecf271f4deae6f2b5bd291974bf735f98681b606310efe11149a67b64\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:27.194536 sshd[11107]: Connection closed by invalid user ubnt 43.160.253.60 port 43796 [preauth] Jun 12 23:04:27.194000 audit[11107]: AUDIT1109 pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:27.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@118-4149-10.0.0.35:22-43.160.253.60:43796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:27.196640 systemd[1]: sshd@118-4149-10.0.0.35:22-43.160.253.60:43796.service: Deactivated successfully. Jun 12 23:04:27.219975 containerd[2455]: time="2026-06-12T23:04:27.219935990Z" level=info msg="connecting to shim 74fe1b211a98abd44c3dceef5d272ea5d7e9c229b05733ba095478b72f14fa45" address="unix:///run/containerd/s/fc7c075d76bd763dd8a57043e582ef27d00edd89838c77eef61d6edb07bfc172" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:27.239972 systemd[1]: Started docker-74fe1b211a98abd44c3dceef5d272ea5d7e9c229b05733ba095478b72f14fa45.scope - libcontainer container 74fe1b211a98abd44c3dceef5d272ea5d7e9c229b05733ba095478b72f14fa45. Jun 12 23:04:27.247000 audit: BPF prog-id=489 op=LOAD Jun 12 23:04:27.248000 audit: BPF prog-id=490 op=LOAD Jun 12 23:04:27.248000 audit[11162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3c07f73e3f80 a2=98 a3=0 items=0 ppid=11151 pid=11162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37346665316232313161393861626434346333646365656635 Jun 12 23:04:27.248000 audit: BPF prog-id=490 op=UNLOAD Jun 12 23:04:27.248000 audit[11162]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11151 pid=11162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37346665316232313161393861626434346333646365656635 Jun 12 23:04:27.248000 audit: BPF prog-id=491 op=LOAD Jun 12 23:04:27.248000 audit[11162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3c07f73e4258 a2=98 a3=0 items=0 ppid=11151 pid=11162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37346665316232313161393861626434346333646365656635 Jun 12 23:04:27.248000 audit: BPF prog-id=492 op=LOAD Jun 12 23:04:27.248000 audit[11162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3c07f73e3f98 a2=98 a3=0 items=0 ppid=11151 pid=11162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37346665316232313161393861626434346333646365656635 Jun 12 23:04:27.248000 audit: BPF prog-id=492 op=UNLOAD Jun 12 23:04:27.248000 audit[11162]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11151 pid=11162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37346665316232313161393861626434346333646365656635 Jun 12 23:04:27.248000 audit: BPF prog-id=491 op=UNLOAD Jun 12 23:04:27.248000 audit[11162]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11151 pid=11162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37346665316232313161393861626434346333646365656635 Jun 12 23:04:27.248000 audit: BPF prog-id=493 op=LOAD Jun 12 23:04:27.248000 audit[11162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3c07f73e44a8 a2=98 a3=0 items=0 ppid=11151 pid=11162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37346665316232313161393861626434346333646365656635 Jun 12 23:04:27.265501 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:27.269314 kernel: docker0: port 1(veth2744979) entered blocking state Jun 12 23:04:27.269388 kernel: docker0: port 1(veth2744979) entered disabled state Jun 12 23:04:27.272435 kernel: veth2744979: entered allmulticast mode Jun 12 23:04:27.275570 kernel: veth2744979: entered promiscuous mode Jun 12 23:04:27.261000 audit: ANOM_PROMISCUOUS dev=veth2744979 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:27.261000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760bc31770 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.261000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:27.277000 audit[11183]: NETFILTER_CFG table=raw:215 family=2 entries=1 op=nft_register_rule pid=11183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:27.277000 audit[11183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd5996c90 a2=0 a3=0 items=0 ppid=2935 pid=11183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:27.277000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:27.279285 systemd-networkd[2176]: veth2744979: Link UP Jun 12 23:04:27.301322 kernel: eth0: renamed from veth8f1f282 Jun 12 23:04:27.301387 kernel: docker0: port 1(veth2744979) entered blocking state Jun 12 23:04:27.301403 kernel: docker0: port 1(veth2744979) entered forwarding state Jun 12 23:04:27.301438 systemd-networkd[2176]: veth2744979: Gained carrier Jun 12 23:04:27.302121 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:27.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-67-10.0.0.35:22-43.160.253.60:43808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:27.366628 systemd[1]: Started sshd@119-67-10.0.0.35:22-43.160.253.60:43808.service - OpenSSH per-connection server daemon (43.160.253.60:43808). Jun 12 23:04:27.882924 sshd[11192]: Invalid user guest1 from 43.160.253.60 port 43808 Jun 12 23:04:28.045199 sshd[11192]: Connection closed by invalid user guest1 43.160.253.60 port 43808 [preauth] Jun 12 23:04:28.043000 audit[11192]: AUDIT1109 pid=11192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:28.046958 systemd[1]: sshd@119-67-10.0.0.35:22-43.160.253.60:43808.service: Deactivated successfully. Jun 12 23:04:28.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@119-67-10.0.0.35:22-43.160.253.60:43808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:28.220359 systemd[1]: Started sshd@120-4150-10.0.0.35:22-43.160.253.60:43818.service - OpenSSH per-connection server daemon (43.160.253.60:43818). Jun 12 23:04:28.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-4150-10.0.0.35:22-43.160.253.60:43818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:28.328806 systemd[1]: docker-74fe1b211a98abd44c3dceef5d272ea5d7e9c229b05733ba095478b72f14fa45.scope: Deactivated successfully. Jun 12 23:04:28.339639 containerd[2455]: time="2026-06-12T23:04:28.339595998Z" level=info msg="shim disconnected" id=74fe1b211a98abd44c3dceef5d272ea5d7e9c229b05733ba095478b72f14fa45 namespace=moby Jun 12 23:04:28.339639 containerd[2455]: time="2026-06-12T23:04:28.339627510Z" level=info msg="cleaning up after shim disconnected" id=74fe1b211a98abd44c3dceef5d272ea5d7e9c229b05733ba095478b72f14fa45 namespace=moby Jun 12 23:04:28.339639 containerd[2455]: time="2026-06-12T23:04:28.339633740Z" level=info msg="cleaning up dead shim" id=74fe1b211a98abd44c3dceef5d272ea5d7e9c229b05733ba095478b72f14fa45 namespace=moby Jun 12 23:04:28.361241 systemd-networkd[2176]: veth2744979: Lost carrier Jun 12 23:04:28.361864 kernel: docker0: port 1(veth2744979) entered disabled state Jun 12 23:04:28.361918 kernel: veth8f1f282: renamed from eth0 Jun 12 23:04:28.380000 audit[11224]: NETFILTER_CFG table=raw:216 family=2 entries=1 op=nft_unregister_rule pid=11224 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:28.380000 audit[11224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffefa5f50 a2=0 a3=0 items=0 ppid=2935 pid=11224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.380000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:28.388263 systemd-networkd[2176]: veth2744979: Link DOWN Jun 12 23:04:28.395902 kernel: docker0: port 1(veth2744979) entered disabled state Jun 12 23:04:28.395962 kernel: veth2744979 (unregistering): left allmulticast mode Jun 12 23:04:28.399438 kernel: veth2744979 (unregistering): left promiscuous mode Jun 12 23:04:28.386000 audit: ANOM_PROMISCUOUS dev=veth2744979 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:28.403041 kernel: docker0: port 1(veth2744979) entered disabled state Jun 12 23:04:28.386000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f7380 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.386000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:28.417000 systemd[1]: run-docker-netns-734d34f9ad60.mount: Deactivated successfully. Jun 12 23:04:28.420138 systemd[1]: var-lib-docker-overlay2-e9563feecf271f4deae6f2b5bd291974bf735f98681b606310efe11149a67b64-merged.mount: Deactivated successfully. Jun 12 23:04:28.430000 audit: BPF prog-id=489 op=UNLOAD Jun 12 23:04:28.430000 audit: BPF prog-id=493 op=UNLOAD Jun 12 23:04:28.521549 systemd[1]: var-lib-docker-overlay2-121c46fd52e5bc6b9678ddd9570a19ec22cea0eff763b9c9ecd87cfcc0f8e3c6\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:28.580148 containerd[2455]: time="2026-06-12T23:04:28.580113284Z" level=info msg="connecting to shim 8f9514fa756deaf9731f61f29b450ac4f5eb2448d03859245aa585e9e5d7c597" address="unix:///run/containerd/s/96bb18122f9cf1fe1434fa7a0bcc1c61ee3bd75964657e8a48fa2a8fcaa2cf0e" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:28.597938 systemd[1]: Started docker-8f9514fa756deaf9731f61f29b450ac4f5eb2448d03859245aa585e9e5d7c597.scope - libcontainer container 8f9514fa756deaf9731f61f29b450ac4f5eb2448d03859245aa585e9e5d7c597. Jun 12 23:04:28.605000 audit: BPF prog-id=494 op=LOAD Jun 12 23:04:28.606000 audit: BPF prog-id=495 op=LOAD Jun 12 23:04:28.606000 audit[11253]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=67b92cbb7f80 a2=98 a3=0 items=0 ppid=11242 pid=11253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663935313466613735366465616639373331663631663239 Jun 12 23:04:28.606000 audit: BPF prog-id=495 op=UNLOAD Jun 12 23:04:28.606000 audit[11253]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11242 pid=11253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663935313466613735366465616639373331663631663239 Jun 12 23:04:28.606000 audit: BPF prog-id=496 op=LOAD Jun 12 23:04:28.606000 audit[11253]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=67b92cbb8258 a2=98 a3=0 items=0 ppid=11242 pid=11253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663935313466613735366465616639373331663631663239 Jun 12 23:04:28.606000 audit: BPF prog-id=497 op=LOAD Jun 12 23:04:28.606000 audit[11253]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=67b92cbb7f98 a2=98 a3=0 items=0 ppid=11242 pid=11253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663935313466613735366465616639373331663631663239 Jun 12 23:04:28.606000 audit: BPF prog-id=497 op=UNLOAD Jun 12 23:04:28.606000 audit[11253]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11242 pid=11253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663935313466613735366465616639373331663631663239 Jun 12 23:04:28.606000 audit: BPF prog-id=496 op=UNLOAD Jun 12 23:04:28.606000 audit[11253]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11242 pid=11253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663935313466613735366465616639373331663631663239 Jun 12 23:04:28.606000 audit: BPF prog-id=498 op=LOAD Jun 12 23:04:28.606000 audit[11253]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=67b92cbb84a8 a2=98 a3=0 items=0 ppid=11242 pid=11253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38663935313466613735366465616639373331663631663239 Jun 12 23:04:28.626065 kernel: docker0: port 1(vethe8027be) entered blocking state Jun 12 23:04:28.626143 kernel: docker0: port 1(vethe8027be) entered disabled state Jun 12 23:04:28.628909 kernel: vethe8027be: entered allmulticast mode Jun 12 23:04:28.632231 kernel: vethe8027be: entered promiscuous mode Jun 12 23:04:28.617000 audit: ANOM_PROMISCUOUS dev=vethe8027be prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:28.617000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b483d70 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.617000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:28.633158 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:28.635000 audit[11273]: NETFILTER_CFG table=raw:217 family=2 entries=1 op=nft_register_rule pid=11273 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:28.635000 audit[11273]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc4cccea0 a2=0 a3=0 items=0 ppid=2935 pid=11273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:28.635000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:28.637461 systemd-networkd[2176]: vethe8027be: Link UP Jun 12 23:04:28.654654 kernel: eth0: renamed from vethe0cc572 Jun 12 23:04:28.654714 kernel: docker0: port 1(vethe8027be) entered blocking state Jun 12 23:04:28.658198 kernel: docker0: port 1(vethe8027be) entered forwarding state Jun 12 23:04:28.658463 systemd-networkd[2176]: vethe8027be: Gained carrier Jun 12 23:04:28.659417 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:28.897411 sshd[11198]: Connection closed by authenticating user root 43.160.253.60 port 43818 [preauth] Jun 12 23:04:28.897000 audit[11198]: AUDIT1109 pid=11198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:28.899697 systemd[1]: sshd@120-4150-10.0.0.35:22-43.160.253.60:43818.service: Deactivated successfully. Jun 12 23:04:28.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@120-4150-10.0.0.35:22-43.160.253.60:43818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:29.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-68-10.0.0.35:22-43.160.253.60:43832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:29.066765 systemd[1]: Started sshd@121-68-10.0.0.35:22-43.160.253.60:43832.service - OpenSSH per-connection server daemon (43.160.253.60:43832). Jun 12 23:04:29.580668 sshd[11285]: Invalid user test from 43.160.253.60 port 43832 Jun 12 23:04:29.691743 systemd[1]: docker-8f9514fa756deaf9731f61f29b450ac4f5eb2448d03859245aa585e9e5d7c597.scope: Deactivated successfully. Jun 12 23:04:29.704535 dockerd[2935]: time="2026-06-12T23:04:29.704479442Z" level=info msg="ignoring event" container=8f9514fa756deaf9731f61f29b450ac4f5eb2448d03859245aa585e9e5d7c597 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:29.705011 containerd[2455]: time="2026-06-12T23:04:29.704511968Z" level=info msg="shim disconnected" id=8f9514fa756deaf9731f61f29b450ac4f5eb2448d03859245aa585e9e5d7c597 namespace=moby Jun 12 23:04:29.705011 containerd[2455]: time="2026-06-12T23:04:29.704536255Z" level=info msg="cleaning up after shim disconnected" id=8f9514fa756deaf9731f61f29b450ac4f5eb2448d03859245aa585e9e5d7c597 namespace=moby Jun 12 23:04:29.705011 containerd[2455]: time="2026-06-12T23:04:29.704541918Z" level=info msg="cleaning up dead shim" id=8f9514fa756deaf9731f61f29b450ac4f5eb2448d03859245aa585e9e5d7c597 namespace=moby Jun 12 23:04:29.726218 systemd-networkd[2176]: vethe8027be: Lost carrier Jun 12 23:04:29.726831 kernel: docker0: port 1(vethe8027be) entered disabled state Jun 12 23:04:29.726884 kernel: vethe0cc572: renamed from eth0 Jun 12 23:04:29.742353 sshd[11285]: Connection closed by invalid user test 43.160.253.60 port 43832 [preauth] Jun 12 23:04:29.741000 audit[11285]: AUDIT1109 pid=11285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:29.743920 systemd[1]: sshd@121-68-10.0.0.35:22-43.160.253.60:43832.service: Deactivated successfully. Jun 12 23:04:29.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@121-68-10.0.0.35:22-43.160.253.60:43832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:29.745000 audit[11313]: NETFILTER_CFG table=raw:218 family=2 entries=1 op=nft_unregister_rule pid=11313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:29.745000 audit[11313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe5b13ab0 a2=0 a3=0 items=0 ppid=2935 pid=11313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:29.745000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:29.750194 systemd-networkd[2176]: vethe8027be: Link DOWN Jun 12 23:04:29.753818 kernel: docker0: port 1(vethe8027be) entered disabled state Jun 12 23:04:29.761368 kernel: vethe8027be (unregistering): left allmulticast mode Jun 12 23:04:29.761425 kernel: vethe8027be (unregistering): left promiscuous mode Jun 12 23:04:29.749000 audit: ANOM_PROMISCUOUS dev=vethe8027be prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:29.765101 kernel: docker0: port 1(vethe8027be) entered disabled state Jun 12 23:04:29.749000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bd8ac00 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:29.749000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:29.775109 systemd[1]: run-docker-netns-d56ebcecf546.mount: Deactivated successfully. Jun 12 23:04:29.781063 systemd[1]: var-lib-docker-overlay2-121c46fd52e5bc6b9678ddd9570a19ec22cea0eff763b9c9ecd87cfcc0f8e3c6-merged.mount: Deactivated successfully. Jun 12 23:04:29.792000 audit: BPF prog-id=494 op=UNLOAD Jun 12 23:04:29.792000 audit: BPF prog-id=498 op=UNLOAD Jun 12 23:04:29.893433 systemd[1]: var-lib-docker-overlay2-681559cc1054dca60decae39fa86e0f3964704a3046484c5cf57c09de88091e5\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:29.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-69-10.0.0.35:22-43.160.253.60:43838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:29.912420 systemd[1]: Started sshd@122-69-10.0.0.35:22-43.160.253.60:43838.service - OpenSSH per-connection server daemon (43.160.253.60:43838). Jun 12 23:04:29.968646 containerd[2455]: time="2026-06-12T23:04:29.968601949Z" level=info msg="connecting to shim a75225832404d3968bcca4743bd4b554d690507e4d6c28ebba341c21f9a00de9" address="unix:///run/containerd/s/936580713c734867cfbe6d852b3d2123c2ca372a0152b00910529cce6012f251" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:29.982937 systemd[1]: Started docker-a75225832404d3968bcca4743bd4b554d690507e4d6c28ebba341c21f9a00de9.scope - libcontainer container a75225832404d3968bcca4743bd4b554d690507e4d6c28ebba341c21f9a00de9. Jun 12 23:04:29.990000 audit: BPF prog-id=499 op=LOAD Jun 12 23:04:29.991000 audit: BPF prog-id=500 op=LOAD Jun 12 23:04:29.991000 audit[11344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=58e7ec1f5f80 a2=98 a3=0 items=0 ppid=11333 pid=11344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:29.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61373532323538333234303464333936386263636134373433 Jun 12 23:04:29.991000 audit: BPF prog-id=500 op=UNLOAD Jun 12 23:04:29.991000 audit[11344]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11333 pid=11344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:29.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61373532323538333234303464333936386263636134373433 Jun 12 23:04:29.991000 audit: BPF prog-id=501 op=LOAD Jun 12 23:04:29.991000 audit[11344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=58e7ec1f6258 a2=98 a3=0 items=0 ppid=11333 pid=11344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:29.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61373532323538333234303464333936386263636134373433 Jun 12 23:04:29.991000 audit: BPF prog-id=502 op=LOAD Jun 12 23:04:29.991000 audit[11344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=58e7ec1f5f98 a2=98 a3=0 items=0 ppid=11333 pid=11344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:29.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61373532323538333234303464333936386263636134373433 Jun 12 23:04:29.991000 audit: BPF prog-id=502 op=UNLOAD Jun 12 23:04:29.991000 audit[11344]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11333 pid=11344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:29.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61373532323538333234303464333936386263636134373433 Jun 12 23:04:29.991000 audit: BPF prog-id=501 op=UNLOAD Jun 12 23:04:29.991000 audit[11344]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11333 pid=11344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:29.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61373532323538333234303464333936386263636134373433 Jun 12 23:04:29.992000 audit: BPF prog-id=503 op=LOAD Jun 12 23:04:29.992000 audit[11344]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=58e7ec1f64a8 a2=98 a3=0 items=0 ppid=11333 pid=11344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:29.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61373532323538333234303464333936386263636134373433 Jun 12 23:04:30.011989 kernel: docker0: port 1(vethedcb024) entered blocking state Jun 12 23:04:30.012072 kernel: docker0: port 1(vethedcb024) entered disabled state Jun 12 23:04:30.014820 kernel: vethedcb024: entered allmulticast mode Jun 12 23:04:30.017662 kernel: vethedcb024: entered promiscuous mode Jun 12 23:04:30.004000 audit: ANOM_PROMISCUOUS dev=vethedcb024 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:30.004000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0dd40 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:30.004000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:30.018739 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:30.020000 audit[11367]: NETFILTER_CFG table=raw:219 family=2 entries=1 op=nft_register_rule pid=11367 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:30.020000 audit[11367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd7c31bd0 a2=0 a3=0 items=0 ppid=2935 pid=11367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:30.020000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:30.021379 systemd-networkd[2176]: vethedcb024: Link UP Jun 12 23:04:30.037825 kernel: eth0: renamed from veth2a69974 Jun 12 23:04:30.037898 kernel: docker0: port 1(vethedcb024) entered blocking state Jun 12 23:04:30.041573 kernel: docker0: port 1(vethedcb024) entered forwarding state Jun 12 23:04:30.042428 systemd-networkd[2176]: vethedcb024: Gained carrier Jun 12 23:04:30.042636 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:30.425180 sshd[11322]: Invalid user test from 43.160.253.60 port 43838 Jun 12 23:04:30.588105 sshd[11322]: Connection closed by invalid user test 43.160.253.60 port 43838 [preauth] Jun 12 23:04:30.587000 audit[11322]: AUDIT1109 pid=11322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:30.598611 systemd[1]: sshd@122-69-10.0.0.35:22-43.160.253.60:43838.service: Deactivated successfully. Jun 12 23:04:30.604200 kernel: kauditd_printk_skb: 152 callbacks suppressed Jun 12 23:04:30.604258 kernel: audit: type=1109 audit(1781305470.587:1955): pid=11322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:30.596000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-69-10.0.0.35:22-43.160.253.60:43838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:30.620174 kernel: audit: type=1131 audit(1781305470.596:1956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@122-69-10.0.0.35:22-43.160.253.60:43838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:30.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-70-10.0.0.35:22-43.160.253.60:43852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:30.760865 systemd[1]: Started sshd@123-70-10.0.0.35:22-43.160.253.60:43852.service - OpenSSH per-connection server daemon (43.160.253.60:43852). Jun 12 23:04:30.775805 kernel: audit: type=1130 audit(1781305470.760:1957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-70-10.0.0.35:22-43.160.253.60:43852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:31.073572 systemd[1]: docker-a75225832404d3968bcca4743bd4b554d690507e4d6c28ebba341c21f9a00de9.scope: Deactivated successfully. Jun 12 23:04:31.087398 dockerd[2935]: time="2026-06-12T23:04:31.087354067Z" level=info msg="ignoring event" container=a75225832404d3968bcca4743bd4b554d690507e4d6c28ebba341c21f9a00de9 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:31.087717 containerd[2455]: time="2026-06-12T23:04:31.087540994Z" level=info msg="shim disconnected" id=a75225832404d3968bcca4743bd4b554d690507e4d6c28ebba341c21f9a00de9 namespace=moby Jun 12 23:04:31.087717 containerd[2455]: time="2026-06-12T23:04:31.087566408Z" level=info msg="cleaning up after shim disconnected" id=a75225832404d3968bcca4743bd4b554d690507e4d6c28ebba341c21f9a00de9 namespace=moby Jun 12 23:04:31.087717 containerd[2455]: time="2026-06-12T23:04:31.087571728Z" level=info msg="cleaning up dead shim" id=a75225832404d3968bcca4743bd4b554d690507e4d6c28ebba341c21f9a00de9 namespace=moby Jun 12 23:04:31.110788 kernel: veth2a69974: renamed from eth0 Jun 12 23:04:31.110896 kernel: docker0: port 1(vethedcb024) entered disabled state Jun 12 23:04:31.112638 systemd-networkd[2176]: vethedcb024: Lost carrier Jun 12 23:04:31.133000 audit[11404]: NETFILTER_CFG table=raw:220 family=2 entries=1 op=nft_unregister_rule pid=11404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:31.133000 audit[11404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff29d1db0 a2=0 a3=0 items=0 ppid=2935 pid=11404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.159022 kernel: audit: type=1325 audit(1781305471.133:1958): table=raw:220 family=2 entries=1 op=nft_unregister_rule pid=11404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:31.159122 kernel: audit: type=1300 audit(1781305471.133:1958): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff29d1db0 a2=0 a3=0 items=0 ppid=2935 pid=11404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.133000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:31.172783 kernel: audit: type=1327 audit(1781305471.133:1958): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:31.173675 systemd-networkd[2176]: vethedcb024: Link DOWN Jun 12 23:04:31.174026 kernel: docker0: port 1(vethedcb024) entered disabled state Jun 12 23:04:31.181108 kernel: vethedcb024 (unregistering): left allmulticast mode Jun 12 23:04:31.185342 kernel: vethedcb024 (unregistering): left promiscuous mode Jun 12 23:04:31.172000 audit: ANOM_PROMISCUOUS dev=vethedcb024 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:31.190279 kernel: docker0: port 1(vethedcb024) entered disabled state Jun 12 23:04:31.190308 kernel: audit: type=1700 audit(1781305471.172:1959): dev=vethedcb024 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:31.172000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bd8a6e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.172000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:31.240286 kernel: audit: type=1300 audit(1781305471.172:1959): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bd8a6e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.240377 kernel: audit: type=1327 audit(1781305471.172:1959): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:31.242680 systemd[1]: run-docker-netns-66398d354d52.mount: Deactivated successfully. Jun 12 23:04:31.246726 systemd[1]: var-lib-docker-overlay2-681559cc1054dca60decae39fa86e0f3964704a3046484c5cf57c09de88091e5-merged.mount: Deactivated successfully. Jun 12 23:04:31.253000 audit: BPF prog-id=499 op=UNLOAD Jun 12 23:04:31.253000 audit: BPF prog-id=503 op=UNLOAD Jun 12 23:04:31.259852 kernel: audit: type=1334 audit(1781305471.253:1960): prog-id=499 op=UNLOAD Jun 12 23:04:31.286360 sshd[11379]: Invalid user git from 43.160.253.60 port 43852 Jun 12 23:04:31.444298 containerd[2455]: time="2026-06-12T23:04:31.444120679Z" level=info msg="connecting to shim cb61870f0b67bff683e022ee8659687db6107f6ad3300a667d98711a350d068a" address="unix:///run/containerd/s/f661c0d78abd35264edc41983be040a784c645fd936dbd9293edbcf13efa7785" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:31.449588 sshd[11379]: Connection closed by invalid user git 43.160.253.60 port 43852 [preauth] Jun 12 23:04:31.449000 audit[11379]: AUDIT1109 pid=11379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:31.451483 systemd[1]: sshd@123-70-10.0.0.35:22-43.160.253.60:43852.service: Deactivated successfully. Jun 12 23:04:31.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@123-70-10.0.0.35:22-43.160.253.60:43852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:31.467159 systemd[1]: Started docker-cb61870f0b67bff683e022ee8659687db6107f6ad3300a667d98711a350d068a.scope - libcontainer container cb61870f0b67bff683e022ee8659687db6107f6ad3300a667d98711a350d068a. Jun 12 23:04:31.474000 audit: BPF prog-id=504 op=LOAD Jun 12 23:04:31.474000 audit: BPF prog-id=505 op=LOAD Jun 12 23:04:31.474000 audit[11433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3579faa37f80 a2=98 a3=0 items=0 ppid=11422 pid=11433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623631383730663062363762666636383365303232656538 Jun 12 23:04:31.475000 audit: BPF prog-id=505 op=UNLOAD Jun 12 23:04:31.475000 audit[11433]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11422 pid=11433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623631383730663062363762666636383365303232656538 Jun 12 23:04:31.475000 audit: BPF prog-id=506 op=LOAD Jun 12 23:04:31.475000 audit[11433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3579faa38258 a2=98 a3=0 items=0 ppid=11422 pid=11433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623631383730663062363762666636383365303232656538 Jun 12 23:04:31.475000 audit: BPF prog-id=507 op=LOAD Jun 12 23:04:31.475000 audit[11433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3579faa37f98 a2=98 a3=0 items=0 ppid=11422 pid=11433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623631383730663062363762666636383365303232656538 Jun 12 23:04:31.475000 audit: BPF prog-id=507 op=UNLOAD Jun 12 23:04:31.475000 audit[11433]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11422 pid=11433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623631383730663062363762666636383365303232656538 Jun 12 23:04:31.475000 audit: BPF prog-id=506 op=UNLOAD Jun 12 23:04:31.475000 audit[11433]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11422 pid=11433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623631383730663062363762666636383365303232656538 Jun 12 23:04:31.475000 audit: BPF prog-id=508 op=LOAD Jun 12 23:04:31.475000 audit[11433]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3579faa384a8 a2=98 a3=0 items=0 ppid=11422 pid=11433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63623631383730663062363762666636383365303232656538 Jun 12 23:04:31.488155 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:31.495713 kernel: docker0: port 1(veth1b93e94) entered blocking state Jun 12 23:04:31.495820 kernel: docker0: port 1(veth1b93e94) entered disabled state Jun 12 23:04:31.498710 kernel: veth1b93e94: entered allmulticast mode Jun 12 23:04:31.501771 kernel: veth1b93e94: entered promiscuous mode Jun 12 23:04:31.486000 audit: ANOM_PROMISCUOUS dev=veth1b93e94 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:31.486000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f9200 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.486000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:31.503000 audit[11456]: NETFILTER_CFG table=raw:221 family=2 entries=1 op=nft_register_rule pid=11456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:31.503000 audit[11456]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc89d8b10 a2=0 a3=0 items=0 ppid=2935 pid=11456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:31.503000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:31.505079 systemd-networkd[2176]: veth1b93e94: Link UP Jun 12 23:04:31.523795 kernel: eth0: renamed from vethd23d6a1 Jun 12 23:04:31.523860 kernel: docker0: port 1(veth1b93e94) entered blocking state Jun 12 23:04:31.523881 kernel: docker0: port 1(veth1b93e94) entered forwarding state Jun 12 23:04:31.526314 systemd-networkd[2176]: veth1b93e94: Gained carrier Jun 12 23:04:31.526982 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:31.619969 systemd[1]: Started sshd@124-4151-10.0.0.35:22-43.160.253.60:43866.service - OpenSSH per-connection server daemon (43.160.253.60:43866). Jun 12 23:04:31.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-4151-10.0.0.35:22-43.160.253.60:43866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:32.130132 sshd[11465]: Invalid user mike from 43.160.253.60 port 43866 Jun 12 23:04:32.291134 sshd[11465]: Connection closed by invalid user mike 43.160.253.60 port 43866 [preauth] Jun 12 23:04:32.290000 audit[11465]: AUDIT1109 pid=11465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/lib64/misc/sshd-session" hostname=43.160.253.60 addr=43.160.253.60 terminal=ssh res=failed' Jun 12 23:04:32.293173 systemd[1]: sshd@124-4151-10.0.0.35:22-43.160.253.60:43866.service: Deactivated successfully. Jun 12 23:04:32.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@124-4151-10.0.0.35:22-43.160.253.60:43866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:04:32.547342 systemd-networkd[2176]: veth1b93e94: Gained IPv6LL Jun 12 23:04:32.552120 systemd[1]: docker-cb61870f0b67bff683e022ee8659687db6107f6ad3300a667d98711a350d068a.scope: Deactivated successfully. Jun 12 23:04:32.562818 dockerd[2935]: time="2026-06-12T23:04:32.562692191Z" level=info msg="ignoring event" container=cb61870f0b67bff683e022ee8659687db6107f6ad3300a667d98711a350d068a module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:32.563808 containerd[2455]: time="2026-06-12T23:04:32.563223788Z" level=info msg="shim disconnected" id=cb61870f0b67bff683e022ee8659687db6107f6ad3300a667d98711a350d068a namespace=moby Jun 12 23:04:32.563808 containerd[2455]: time="2026-06-12T23:04:32.563751881Z" level=info msg="cleaning up after shim disconnected" id=cb61870f0b67bff683e022ee8659687db6107f6ad3300a667d98711a350d068a namespace=moby Jun 12 23:04:32.563808 containerd[2455]: time="2026-06-12T23:04:32.563762929Z" level=info msg="cleaning up dead shim" id=cb61870f0b67bff683e022ee8659687db6107f6ad3300a667d98711a350d068a namespace=moby Jun 12 23:04:32.585029 systemd-networkd[2176]: veth1b93e94: Lost carrier Jun 12 23:04:32.585794 kernel: docker0: port 1(veth1b93e94) entered disabled state Jun 12 23:04:32.585854 kernel: vethd23d6a1: renamed from eth0 Jun 12 23:04:32.598000 audit[11492]: NETFILTER_CFG table=raw:222 family=2 entries=1 op=nft_unregister_rule pid=11492 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:32.598000 audit[11492]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe02c6d50 a2=0 a3=0 items=0 ppid=2935 pid=11492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.598000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:32.605242 systemd-networkd[2176]: veth1b93e94: Link DOWN Jun 12 23:04:32.609794 kernel: docker0: port 1(veth1b93e94) entered disabled state Jun 12 23:04:32.617566 kernel: veth1b93e94 (unregistering): left allmulticast mode Jun 12 23:04:32.617629 kernel: veth1b93e94 (unregistering): left promiscuous mode Jun 12 23:04:32.604000 audit: ANOM_PROMISCUOUS dev=veth1b93e94 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:32.621733 kernel: docker0: port 1(veth1b93e94) entered disabled state Jun 12 23:04:32.604000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb30360 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.604000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:32.633300 systemd[1]: run-docker-netns-4823b409b99b.mount: Deactivated successfully. Jun 12 23:04:32.637683 systemd[1]: var-lib-docker-overlay2-782613ed3c36443d2de7077de17d8b5811d36a6e3c4f45c18f03f08d1c6ac67d-merged.mount: Deactivated successfully. Jun 12 23:04:32.647000 audit: BPF prog-id=504 op=UNLOAD Jun 12 23:04:32.647000 audit: BPF prog-id=508 op=UNLOAD Jun 12 23:04:32.741929 systemd[1]: var-lib-docker-overlay2-6f1f6de185b65ec127cced9439a09ab92352daf6591394671eb8459775d1d357\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:32.807688 containerd[2455]: time="2026-06-12T23:04:32.807574350Z" level=info msg="connecting to shim 8419fcad44d1c08bccb3c6479b923394bdab7e6e5f35631be0ad91eecc13e55e" address="unix:///run/containerd/s/b366da63ced66b88e8fdfac3612627400f1d2c22377067f5b277f3d1d799e08b" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:32.827931 systemd[1]: Started docker-8419fcad44d1c08bccb3c6479b923394bdab7e6e5f35631be0ad91eecc13e55e.scope - libcontainer container 8419fcad44d1c08bccb3c6479b923394bdab7e6e5f35631be0ad91eecc13e55e. Jun 12 23:04:32.835000 audit: BPF prog-id=509 op=LOAD Jun 12 23:04:32.835000 audit: BPF prog-id=510 op=LOAD Jun 12 23:04:32.835000 audit[11522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=778a402b7f80 a2=98 a3=0 items=0 ppid=11510 pid=11522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343139666361643434643163303862636362336336343739 Jun 12 23:04:32.835000 audit: BPF prog-id=510 op=UNLOAD Jun 12 23:04:32.835000 audit[11522]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11510 pid=11522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343139666361643434643163303862636362336336343739 Jun 12 23:04:32.836000 audit: BPF prog-id=511 op=LOAD Jun 12 23:04:32.836000 audit[11522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=778a402b8258 a2=98 a3=0 items=0 ppid=11510 pid=11522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343139666361643434643163303862636362336336343739 Jun 12 23:04:32.836000 audit: BPF prog-id=512 op=LOAD Jun 12 23:04:32.836000 audit[11522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=778a402b7f98 a2=98 a3=0 items=0 ppid=11510 pid=11522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343139666361643434643163303862636362336336343739 Jun 12 23:04:32.836000 audit: BPF prog-id=512 op=UNLOAD Jun 12 23:04:32.836000 audit[11522]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11510 pid=11522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343139666361643434643163303862636362336336343739 Jun 12 23:04:32.836000 audit: BPF prog-id=511 op=UNLOAD Jun 12 23:04:32.836000 audit[11522]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11510 pid=11522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343139666361643434643163303862636362336336343739 Jun 12 23:04:32.836000 audit: BPF prog-id=513 op=LOAD Jun 12 23:04:32.836000 audit[11522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=778a402b84a8 a2=98 a3=0 items=0 ppid=11510 pid=11522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38343139666361643434643163303862636362336336343739 Jun 12 23:04:32.849564 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:32.857106 kernel: docker0: port 1(veth88f9e98) entered blocking state Jun 12 23:04:32.857188 kernel: docker0: port 1(veth88f9e98) entered disabled state Jun 12 23:04:32.860007 kernel: veth88f9e98: entered allmulticast mode Jun 12 23:04:32.863020 kernel: veth88f9e98: entered promiscuous mode Jun 12 23:04:32.848000 audit: ANOM_PROMISCUOUS dev=veth88f9e98 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:32.848000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaa4b0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.848000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:32.864000 audit[11543]: NETFILTER_CFG table=raw:223 family=2 entries=1 op=nft_register_rule pid=11543 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:32.864000 audit[11543]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe31b4e10 a2=0 a3=0 items=0 ppid=2935 pid=11543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:32.864000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:32.866027 systemd-networkd[2176]: veth88f9e98: Link UP Jun 12 23:04:32.889695 kernel: eth0: renamed from veth8c46e00 Jun 12 23:04:32.889800 kernel: docker0: port 1(veth88f9e98) entered blocking state Jun 12 23:04:32.889820 kernel: docker0: port 1(veth88f9e98) entered forwarding state Jun 12 23:04:32.890038 systemd-networkd[2176]: veth88f9e98: Gained carrier Jun 12 23:04:32.890453 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:33.918881 systemd[1]: docker-8419fcad44d1c08bccb3c6479b923394bdab7e6e5f35631be0ad91eecc13e55e.scope: Deactivated successfully. Jun 12 23:04:33.931726 containerd[2455]: time="2026-06-12T23:04:33.931599719Z" level=info msg="shim disconnected" id=8419fcad44d1c08bccb3c6479b923394bdab7e6e5f35631be0ad91eecc13e55e namespace=moby Jun 12 23:04:33.931726 containerd[2455]: time="2026-06-12T23:04:33.931626621Z" level=info msg="cleaning up after shim disconnected" id=8419fcad44d1c08bccb3c6479b923394bdab7e6e5f35631be0ad91eecc13e55e namespace=moby Jun 12 23:04:33.931726 containerd[2455]: time="2026-06-12T23:04:33.931633411Z" level=info msg="cleaning up dead shim" id=8419fcad44d1c08bccb3c6479b923394bdab7e6e5f35631be0ad91eecc13e55e namespace=moby Jun 12 23:04:33.932551 dockerd[2935]: time="2026-06-12T23:04:33.932380310Z" level=info msg="ignoring event" container=8419fcad44d1c08bccb3c6479b923394bdab7e6e5f35631be0ad91eecc13e55e module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:33.956093 kernel: docker0: port 1(veth88f9e98) entered disabled state Jun 12 23:04:33.955897 systemd-networkd[2176]: veth88f9e98: Lost carrier Jun 12 23:04:33.959799 kernel: veth8c46e00: renamed from eth0 Jun 12 23:04:33.973000 audit[11574]: NETFILTER_CFG table=raw:224 family=2 entries=1 op=nft_unregister_rule pid=11574 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:33.973000 audit[11574]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd85d1730 a2=0 a3=0 items=0 ppid=2935 pid=11574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:33.973000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:33.978178 systemd-networkd[2176]: veth88f9e98: Link DOWN Jun 12 23:04:33.985700 kernel: docker0: port 1(veth88f9e98) entered disabled state Jun 12 23:04:33.985762 kernel: veth88f9e98 (unregistering): left allmulticast mode Jun 12 23:04:33.989609 kernel: veth88f9e98 (unregistering): left promiscuous mode Jun 12 23:04:33.977000 audit: ANOM_PROMISCUOUS dev=veth88f9e98 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:33.993219 kernel: docker0: port 1(veth88f9e98) entered disabled state Jun 12 23:04:33.977000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb31480 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:33.977000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:34.007424 systemd[1]: run-docker-netns-ff3c5b54290b.mount: Deactivated successfully. Jun 12 23:04:34.010132 systemd[1]: var-lib-docker-overlay2-6f1f6de185b65ec127cced9439a09ab92352daf6591394671eb8459775d1d357-merged.mount: Deactivated successfully. Jun 12 23:04:34.023000 audit: BPF prog-id=509 op=UNLOAD Jun 12 23:04:34.023000 audit: BPF prog-id=513 op=UNLOAD Jun 12 23:04:34.082050 systemd[1]: var-lib-docker-overlay2-3b0b267c1ac484112b73bac570173d36c956a517d01b95c45edb9d19276c19bb\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:34.155808 containerd[2455]: time="2026-06-12T23:04:34.155586555Z" level=info msg="connecting to shim 67902925268c03fcd69a55cd98d81e8ca8f36fd5364e402d31f6c6ba2822034f" address="unix:///run/containerd/s/fd4894eed603332ecf62d5fe1eb2942b267821facc772c223d57def4f43b25c4" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:34.176919 systemd[1]: Started docker-67902925268c03fcd69a55cd98d81e8ca8f36fd5364e402d31f6c6ba2822034f.scope - libcontainer container 67902925268c03fcd69a55cd98d81e8ca8f36fd5364e402d31f6c6ba2822034f. Jun 12 23:04:34.185000 audit: BPF prog-id=514 op=LOAD Jun 12 23:04:34.185000 audit: BPF prog-id=515 op=LOAD Jun 12 23:04:34.185000 audit[11603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7e7246971f80 a2=98 a3=0 items=0 ppid=11591 pid=11603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:34.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36373930323932353236386330336663643639613535636439 Jun 12 23:04:34.185000 audit: BPF prog-id=515 op=UNLOAD Jun 12 23:04:34.185000 audit[11603]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11591 pid=11603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:34.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36373930323932353236386330336663643639613535636439 Jun 12 23:04:34.185000 audit: BPF prog-id=516 op=LOAD Jun 12 23:04:34.185000 audit[11603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7e7246972258 a2=98 a3=0 items=0 ppid=11591 pid=11603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:34.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36373930323932353236386330336663643639613535636439 Jun 12 23:04:34.186000 audit: BPF prog-id=517 op=LOAD Jun 12 23:04:34.186000 audit[11603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7e7246971f98 a2=98 a3=0 items=0 ppid=11591 pid=11603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:34.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36373930323932353236386330336663643639613535636439 Jun 12 23:04:34.186000 audit: BPF prog-id=517 op=UNLOAD Jun 12 23:04:34.186000 audit[11603]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11591 pid=11603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:34.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36373930323932353236386330336663643639613535636439 Jun 12 23:04:34.186000 audit: BPF prog-id=516 op=UNLOAD Jun 12 23:04:34.186000 audit[11603]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11591 pid=11603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:34.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36373930323932353236386330336663643639613535636439 Jun 12 23:04:34.186000 audit: BPF prog-id=518 op=LOAD Jun 12 23:04:34.186000 audit[11603]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7e72469724a8 a2=98 a3=0 items=0 ppid=11591 pid=11603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:34.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36373930323932353236386330336663643639613535636439 Jun 12 23:04:34.206542 kernel: docker0: port 1(vethf5e1a3a) entered blocking state Jun 12 23:04:34.206628 kernel: docker0: port 1(vethf5e1a3a) entered disabled state Jun 12 23:04:34.209564 kernel: vethf5e1a3a: entered allmulticast mode Jun 12 23:04:34.198000 audit: ANOM_PROMISCUOUS dev=vethf5e1a3a prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:34.198000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b9450b0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:34.198000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:34.213923 kernel: vethf5e1a3a: entered promiscuous mode Jun 12 23:04:34.214298 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:34.215000 audit[11626]: NETFILTER_CFG table=raw:225 family=2 entries=1 op=nft_register_rule pid=11626 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:34.215000 audit[11626]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe8dc37c0 a2=0 a3=0 items=0 ppid=2935 pid=11626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:34.215000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:34.217889 systemd-networkd[2176]: vethf5e1a3a: Link UP Jun 12 23:04:34.238590 kernel: eth0: renamed from vethffe093f Jun 12 23:04:34.238666 kernel: docker0: port 1(vethf5e1a3a) entered blocking state Jun 12 23:04:34.242130 kernel: docker0: port 1(vethf5e1a3a) entered forwarding state Jun 12 23:04:34.242247 systemd-networkd[2176]: vethf5e1a3a: Gained carrier Jun 12 23:04:34.244250 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:35.276321 systemd[1]: docker-67902925268c03fcd69a55cd98d81e8ca8f36fd5364e402d31f6c6ba2822034f.scope: Deactivated successfully. Jun 12 23:04:35.288795 containerd[2455]: time="2026-06-12T23:04:35.288732739Z" level=info msg="shim disconnected" id=67902925268c03fcd69a55cd98d81e8ca8f36fd5364e402d31f6c6ba2822034f namespace=moby Jun 12 23:04:35.288795 containerd[2455]: time="2026-06-12T23:04:35.288762144Z" level=info msg="cleaning up after shim disconnected" id=67902925268c03fcd69a55cd98d81e8ca8f36fd5364e402d31f6c6ba2822034f namespace=moby Jun 12 23:04:35.288795 containerd[2455]: time="2026-06-12T23:04:35.288768038Z" level=info msg="cleaning up dead shim" id=67902925268c03fcd69a55cd98d81e8ca8f36fd5364e402d31f6c6ba2822034f namespace=moby Jun 12 23:04:35.289320 dockerd[2935]: time="2026-06-12T23:04:35.289234625Z" level=info msg="ignoring event" container=67902925268c03fcd69a55cd98d81e8ca8f36fd5364e402d31f6c6ba2822034f module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:35.310263 systemd-networkd[2176]: vethf5e1a3a: Lost carrier Jun 12 23:04:35.310806 kernel: docker0: port 1(vethf5e1a3a) entered disabled state Jun 12 23:04:35.313801 kernel: vethffe093f: renamed from eth0 Jun 12 23:04:35.325000 audit[11657]: NETFILTER_CFG table=raw:226 family=2 entries=1 op=nft_unregister_rule pid=11657 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:35.325000 audit[11657]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe08cb940 a2=0 a3=0 items=0 ppid=2935 pid=11657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.325000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:35.330814 systemd-networkd[2176]: vethf5e1a3a: Link DOWN Jun 12 23:04:35.334805 kernel: docker0: port 1(vethf5e1a3a) entered disabled state Jun 12 23:04:35.342390 kernel: vethf5e1a3a (unregistering): left allmulticast mode Jun 12 23:04:35.342460 kernel: vethf5e1a3a (unregistering): left promiscuous mode Jun 12 23:04:35.328000 audit: ANOM_PROMISCUOUS dev=vethf5e1a3a prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:35.345787 kernel: docker0: port 1(vethf5e1a3a) entered disabled state Jun 12 23:04:35.328000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6500 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.328000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:35.355449 systemd[1]: run-docker-netns-a29eb779f09f.mount: Deactivated successfully. Jun 12 23:04:35.357894 systemd[1]: var-lib-docker-overlay2-3b0b267c1ac484112b73bac570173d36c956a517d01b95c45edb9d19276c19bb-merged.mount: Deactivated successfully. Jun 12 23:04:35.366000 audit: BPF prog-id=514 op=UNLOAD Jun 12 23:04:35.366000 audit: BPF prog-id=518 op=UNLOAD Jun 12 23:04:35.427678 systemd[1]: var-lib-docker-overlay2-28ba23257c7ba099d64ea4c9c77984e4afd3a8c945d1acc4b164beecaa7d2155\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:35.505510 containerd[2455]: time="2026-06-12T23:04:35.505440342Z" level=info msg="connecting to shim 17a254b10123e20037296c4ce659cda0ca28a099c1c08d0dd1235f154abcc83e" address="unix:///run/containerd/s/18301ff0e2012236852ae930ca1b03634b889725f6d08ff8c46883b78e379c45" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:35.526927 systemd[1]: Started docker-17a254b10123e20037296c4ce659cda0ca28a099c1c08d0dd1235f154abcc83e.scope - libcontainer container 17a254b10123e20037296c4ce659cda0ca28a099c1c08d0dd1235f154abcc83e. Jun 12 23:04:35.533000 audit: BPF prog-id=519 op=LOAD Jun 12 23:04:35.533000 audit: BPF prog-id=520 op=LOAD Jun 12 23:04:35.533000 audit[11686]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=154a74f37f80 a2=98 a3=0 items=0 ppid=11675 pid=11686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376132353462313031323365323030333732393663346365 Jun 12 23:04:35.533000 audit: BPF prog-id=520 op=UNLOAD Jun 12 23:04:35.533000 audit[11686]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11675 pid=11686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376132353462313031323365323030333732393663346365 Jun 12 23:04:35.534000 audit: BPF prog-id=521 op=LOAD Jun 12 23:04:35.534000 audit[11686]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=154a74f38258 a2=98 a3=0 items=0 ppid=11675 pid=11686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376132353462313031323365323030333732393663346365 Jun 12 23:04:35.534000 audit: BPF prog-id=522 op=LOAD Jun 12 23:04:35.534000 audit[11686]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=154a74f37f98 a2=98 a3=0 items=0 ppid=11675 pid=11686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376132353462313031323365323030333732393663346365 Jun 12 23:04:35.534000 audit: BPF prog-id=522 op=UNLOAD Jun 12 23:04:35.534000 audit[11686]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=11675 pid=11686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376132353462313031323365323030333732393663346365 Jun 12 23:04:35.534000 audit: BPF prog-id=521 op=UNLOAD Jun 12 23:04:35.534000 audit[11686]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=11675 pid=11686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376132353462313031323365323030333732393663346365 Jun 12 23:04:35.534000 audit: BPF prog-id=523 op=LOAD Jun 12 23:04:35.534000 audit[11686]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=154a74f384a8 a2=98 a3=0 items=0 ppid=11675 pid=11686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31376132353462313031323365323030333732393663346365 Jun 12 23:04:35.554366 kernel: docker0: port 1(veth005e328) entered blocking state Jun 12 23:04:35.554450 kernel: docker0: port 1(veth005e328) entered disabled state Jun 12 23:04:35.557026 kernel: veth005e328: entered allmulticast mode Jun 12 23:04:35.559621 kernel: veth005e328: entered promiscuous mode Jun 12 23:04:35.545000 audit: ANOM_PROMISCUOUS dev=veth005e328 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:35.545000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760bc30570 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.560261 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:35.545000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:35.560000 audit[11707]: NETFILTER_CFG table=raw:227 family=2 entries=1 op=nft_register_rule pid=11707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:35.560000 audit[11707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd4e7a7d0 a2=0 a3=0 items=0 ppid=2935 pid=11707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:35.560000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:35.564159 systemd-networkd[2176]: veth005e328: Link UP Jun 12 23:04:35.584796 kernel: eth0: renamed from veth4a7657f Jun 12 23:04:35.584874 kernel: docker0: port 1(veth005e328) entered blocking state Jun 12 23:04:35.591330 kernel: docker0: port 1(veth005e328) entered forwarding state Jun 12 23:04:35.591580 systemd-networkd[2176]: veth005e328: Gained carrier Jun 12 23:04:35.592082 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:36.617231 systemd[1]: docker-17a254b10123e20037296c4ce659cda0ca28a099c1c08d0dd1235f154abcc83e.scope: Deactivated successfully. Jun 12 23:04:36.628134 dockerd[2935]: time="2026-06-12T23:04:36.628046025Z" level=info msg="ignoring event" container=17a254b10123e20037296c4ce659cda0ca28a099c1c08d0dd1235f154abcc83e module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:36.629424 containerd[2455]: time="2026-06-12T23:04:36.629288398Z" level=info msg="shim disconnected" id=17a254b10123e20037296c4ce659cda0ca28a099c1c08d0dd1235f154abcc83e namespace=moby Jun 12 23:04:36.629424 containerd[2455]: time="2026-06-12T23:04:36.629318092Z" level=info msg="cleaning up after shim disconnected" id=17a254b10123e20037296c4ce659cda0ca28a099c1c08d0dd1235f154abcc83e namespace=moby Jun 12 23:04:36.629424 containerd[2455]: time="2026-06-12T23:04:36.629323884Z" level=info msg="cleaning up dead shim" id=17a254b10123e20037296c4ce659cda0ca28a099c1c08d0dd1235f154abcc83e namespace=moby Jun 12 23:04:36.651465 systemd-networkd[2176]: veth005e328: Lost carrier Jun 12 23:04:36.651994 kernel: docker0: port 1(veth005e328) entered disabled state Jun 12 23:04:36.655797 kernel: veth4a7657f: renamed from eth0 Jun 12 23:04:36.667000 audit[11738]: NETFILTER_CFG table=raw:228 family=2 entries=1 op=nft_unregister_rule pid=11738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:36.672561 kernel: kauditd_printk_skb: 142 callbacks suppressed Jun 12 23:04:36.672598 kernel: audit: type=1325 audit(1781305476.667:2019): table=raw:228 family=2 entries=1 op=nft_unregister_rule pid=11738 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:36.667000 audit[11738]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdffa4720 a2=0 a3=0 items=0 ppid=2935 pid=11738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.697331 kernel: audit: type=1300 audit(1781305476.667:2019): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdffa4720 a2=0 a3=0 items=0 ppid=2935 pid=11738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.667000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:36.708941 kernel: audit: type=1327 audit(1781305476.667:2019): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:36.709420 systemd-networkd[2176]: veth005e328: Link DOWN Jun 12 23:04:36.713166 kernel: docker0: port 1(veth005e328) entered disabled state Jun 12 23:04:36.713204 kernel: veth005e328 (unregistering): left allmulticast mode Jun 12 23:04:36.719742 kernel: veth005e328 (unregistering): left promiscuous mode Jun 12 23:04:36.696000 audit: ANOM_PROMISCUOUS dev=veth005e328 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:36.723881 kernel: docker0: port 1(veth005e328) entered disabled state Jun 12 23:04:36.723903 kernel: audit: type=1700 audit(1781305476.696:2020): dev=veth005e328 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:36.696000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb07c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.696000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:36.768642 kernel: audit: type=1300 audit(1781305476.696:2020): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb07c0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.768713 kernel: audit: type=1327 audit(1781305476.696:2020): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:36.771356 systemd[1]: run-docker-netns-3442d4bf7903.mount: Deactivated successfully. Jun 12 23:04:36.773955 systemd[1]: var-lib-docker-overlay2-28ba23257c7ba099d64ea4c9c77984e4afd3a8c945d1acc4b164beecaa7d2155-merged.mount: Deactivated successfully. Jun 12 23:04:36.787000 audit: BPF prog-id=519 op=UNLOAD Jun 12 23:04:36.787000 audit: BPF prog-id=523 op=UNLOAD Jun 12 23:04:36.797214 kernel: audit: type=1334 audit(1781305476.787:2021): prog-id=519 op=UNLOAD Jun 12 23:04:36.797261 kernel: audit: type=1334 audit(1781305476.787:2022): prog-id=523 op=UNLOAD Jun 12 23:04:36.915038 containerd[2455]: time="2026-06-12T23:04:36.914942314Z" level=info msg="connecting to shim cbe26e0f84a4d158ab1366f57f4472de2e4c2ddfb863ffb1157399c0e73f8222" address="unix:///run/containerd/s/193060ab05a73afb4e13e8ae2c44151870e06126f4eb970c6c4b1fba4699e4fd" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:36.936150 systemd[1]: Started docker-cbe26e0f84a4d158ab1366f57f4472de2e4c2ddfb863ffb1157399c0e73f8222.scope - libcontainer container cbe26e0f84a4d158ab1366f57f4472de2e4c2ddfb863ffb1157399c0e73f8222. Jun 12 23:04:36.942000 audit: BPF prog-id=524 op=LOAD Jun 12 23:04:36.947000 audit: BPF prog-id=525 op=LOAD Jun 12 23:04:36.952830 kernel: audit: type=1334 audit(1781305476.942:2023): prog-id=524 op=LOAD Jun 12 23:04:36.952896 kernel: audit: type=1334 audit(1781305476.947:2024): prog-id=525 op=LOAD Jun 12 23:04:36.947000 audit[11766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=542607233f80 a2=98 a3=0 items=0 ppid=11755 pid=11766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63626532366530663834613464313538616231333636663537 Jun 12 23:04:36.947000 audit: BPF prog-id=525 op=UNLOAD Jun 12 23:04:36.947000 audit[11766]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11755 pid=11766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63626532366530663834613464313538616231333636663537 Jun 12 23:04:36.947000 audit: BPF prog-id=526 op=LOAD Jun 12 23:04:36.947000 audit[11766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=542607234258 a2=98 a3=0 items=0 ppid=11755 pid=11766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63626532366530663834613464313538616231333636663537 Jun 12 23:04:36.951000 audit: BPF prog-id=527 op=LOAD Jun 12 23:04:36.951000 audit[11766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=542607233f98 a2=98 a3=0 items=0 ppid=11755 pid=11766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63626532366530663834613464313538616231333636663537 Jun 12 23:04:36.951000 audit: BPF prog-id=527 op=UNLOAD Jun 12 23:04:36.951000 audit[11766]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11755 pid=11766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63626532366530663834613464313538616231333636663537 Jun 12 23:04:36.951000 audit: BPF prog-id=526 op=UNLOAD Jun 12 23:04:36.951000 audit[11766]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11755 pid=11766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63626532366530663834613464313538616231333636663537 Jun 12 23:04:36.952000 audit: BPF prog-id=528 op=LOAD Jun 12 23:04:36.952000 audit[11766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5426072344a8 a2=98 a3=0 items=0 ppid=11755 pid=11766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F63626532366530663834613464313538616231333636663537 Jun 12 23:04:36.964527 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:36.971362 kernel: docker0: port 1(veth131aa60) entered blocking state Jun 12 23:04:36.971424 kernel: docker0: port 1(veth131aa60) entered disabled state Jun 12 23:04:36.974094 kernel: veth131aa60: entered allmulticast mode Jun 12 23:04:36.976791 kernel: veth131aa60: entered promiscuous mode Jun 12 23:04:36.962000 audit: ANOM_PROMISCUOUS dev=veth131aa60 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:36.962000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b482b40 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.962000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:36.977000 audit[11787]: NETFILTER_CFG table=raw:229 family=2 entries=1 op=nft_register_rule pid=11787 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:36.977000 audit[11787]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd6f50e10 a2=0 a3=0 items=0 ppid=2935 pid=11787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:36.977000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:36.980182 systemd-networkd[2176]: veth131aa60: Link UP Jun 12 23:04:36.998792 kernel: eth0: renamed from veth61052c3 Jun 12 23:04:37.006558 kernel: docker0: port 1(veth131aa60) entered blocking state Jun 12 23:04:37.006731 kernel: docker0: port 1(veth131aa60) entered forwarding state Jun 12 23:04:37.006609 systemd-networkd[2176]: veth131aa60: Gained carrier Jun 12 23:04:37.007242 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:38.042301 systemd[1]: docker-cbe26e0f84a4d158ab1366f57f4472de2e4c2ddfb863ffb1157399c0e73f8222.scope: Deactivated successfully. Jun 12 23:04:38.054117 containerd[2455]: time="2026-06-12T23:04:38.054059795Z" level=info msg="shim disconnected" id=cbe26e0f84a4d158ab1366f57f4472de2e4c2ddfb863ffb1157399c0e73f8222 namespace=moby Jun 12 23:04:38.054117 containerd[2455]: time="2026-06-12T23:04:38.054095745Z" level=info msg="cleaning up after shim disconnected" id=cbe26e0f84a4d158ab1366f57f4472de2e4c2ddfb863ffb1157399c0e73f8222 namespace=moby Jun 12 23:04:38.054117 containerd[2455]: time="2026-06-12T23:04:38.054103792Z" level=info msg="cleaning up dead shim" id=cbe26e0f84a4d158ab1366f57f4472de2e4c2ddfb863ffb1157399c0e73f8222 namespace=moby Jun 12 23:04:38.054812 dockerd[2935]: time="2026-06-12T23:04:38.054467258Z" level=info msg="ignoring event" container=cbe26e0f84a4d158ab1366f57f4472de2e4c2ddfb863ffb1157399c0e73f8222 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:38.075075 systemd-networkd[2176]: veth131aa60: Lost carrier Jun 12 23:04:38.078103 kernel: docker0: port 1(veth131aa60) entered disabled state Jun 12 23:04:38.078165 kernel: veth61052c3: renamed from eth0 Jun 12 23:04:38.094000 audit[11818]: NETFILTER_CFG table=raw:230 family=2 entries=1 op=nft_unregister_rule pid=11818 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:38.094000 audit[11818]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd7539160 a2=0 a3=0 items=0 ppid=2935 pid=11818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.094000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:38.104201 systemd-networkd[2176]: veth131aa60: Link DOWN Jun 12 23:04:38.108918 kernel: docker0: port 1(veth131aa60) entered disabled state Jun 12 23:04:38.116233 kernel: veth131aa60 (unregistering): left allmulticast mode Jun 12 23:04:38.116294 kernel: veth131aa60 (unregistering): left promiscuous mode Jun 12 23:04:38.103000 audit: ANOM_PROMISCUOUS dev=veth131aa60 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:38.119622 kernel: docker0: port 1(veth131aa60) entered disabled state Jun 12 23:04:38.103000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb0ee0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.103000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:38.129245 systemd[1]: run-docker-netns-9285e76a29b8.mount: Deactivated successfully. Jun 12 23:04:38.131995 systemd[1]: var-lib-docker-overlay2-f574488479cc3885568b0c15b78788c0585f1d4688e90b94cea02b5a6beab5c6-merged.mount: Deactivated successfully. Jun 12 23:04:38.140000 audit: BPF prog-id=524 op=UNLOAD Jun 12 23:04:38.140000 audit: BPF prog-id=528 op=UNLOAD Jun 12 23:04:38.230881 systemd[1]: var-lib-docker-overlay2-2b72a859d26c75851bcf58aa7040c62bd2c66d8a110d77e2d08e2a7c3f662bc3\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:38.291023 containerd[2455]: time="2026-06-12T23:04:38.290981686Z" level=info msg="connecting to shim 1d2fda8f89e57bc4d4ea2b060fc216e7a7b9e3fdb989c068ab7731cd2d5e9c67" address="unix:///run/containerd/s/77eedd646e47fe4d4f1284f761c2f990e9c59b573cf9d155a7bf4424ab92680e" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:38.312116 systemd[1]: Started docker-1d2fda8f89e57bc4d4ea2b060fc216e7a7b9e3fdb989c068ab7731cd2d5e9c67.scope - libcontainer container 1d2fda8f89e57bc4d4ea2b060fc216e7a7b9e3fdb989c068ab7731cd2d5e9c67. Jun 12 23:04:38.319000 audit: BPF prog-id=529 op=LOAD Jun 12 23:04:38.319000 audit: BPF prog-id=530 op=LOAD Jun 12 23:04:38.319000 audit[11847]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6a673c723f80 a2=98 a3=0 items=0 ppid=11836 pid=11847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31643266646138663839653537626334643465613262303630 Jun 12 23:04:38.320000 audit: BPF prog-id=530 op=UNLOAD Jun 12 23:04:38.320000 audit[11847]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11836 pid=11847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31643266646138663839653537626334643465613262303630 Jun 12 23:04:38.320000 audit: BPF prog-id=531 op=LOAD Jun 12 23:04:38.320000 audit[11847]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6a673c724258 a2=98 a3=0 items=0 ppid=11836 pid=11847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31643266646138663839653537626334643465613262303630 Jun 12 23:04:38.320000 audit: BPF prog-id=532 op=LOAD Jun 12 23:04:38.320000 audit[11847]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=6a673c723f98 a2=98 a3=0 items=0 ppid=11836 pid=11847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31643266646138663839653537626334643465613262303630 Jun 12 23:04:38.320000 audit: BPF prog-id=532 op=UNLOAD Jun 12 23:04:38.320000 audit[11847]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11836 pid=11847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31643266646138663839653537626334643465613262303630 Jun 12 23:04:38.320000 audit: BPF prog-id=531 op=UNLOAD Jun 12 23:04:38.320000 audit[11847]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11836 pid=11847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31643266646138663839653537626334643465613262303630 Jun 12 23:04:38.320000 audit: BPF prog-id=533 op=LOAD Jun 12 23:04:38.320000 audit[11847]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=6a673c7244a8 a2=98 a3=0 items=0 ppid=11836 pid=11847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31643266646138663839653537626334643465613262303630 Jun 12 23:04:38.340200 kernel: docker0: port 1(veth1e29c29) entered blocking state Jun 12 23:04:38.340272 kernel: docker0: port 1(veth1e29c29) entered disabled state Jun 12 23:04:38.342995 kernel: veth1e29c29: entered allmulticast mode Jun 12 23:04:38.345715 kernel: veth1e29c29: entered promiscuous mode Jun 12 23:04:38.332000 audit: ANOM_PROMISCUOUS dev=veth1e29c29 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:38.332000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f80f0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.346213 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:38.332000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:38.348000 audit[11869]: NETFILTER_CFG table=raw:231 family=2 entries=1 op=nft_register_rule pid=11869 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:38.348000 audit[11869]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc8fb3500 a2=0 a3=0 items=0 ppid=2935 pid=11869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:38.348000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:38.349563 systemd-networkd[2176]: veth1e29c29: Link UP Jun 12 23:04:38.367797 kernel: eth0: renamed from vethfad7a32 Jun 12 23:04:38.367863 kernel: docker0: port 1(veth1e29c29) entered blocking state Jun 12 23:04:38.367891 kernel: docker0: port 1(veth1e29c29) entered forwarding state Jun 12 23:04:38.371000 systemd-networkd[2176]: veth1e29c29: Gained carrier Jun 12 23:04:38.371527 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:39.399879 systemd[1]: docker-1d2fda8f89e57bc4d4ea2b060fc216e7a7b9e3fdb989c068ab7731cd2d5e9c67.scope: Deactivated successfully. Jun 12 23:04:39.411913 dockerd[2935]: time="2026-06-12T23:04:39.411771191Z" level=info msg="ignoring event" container=1d2fda8f89e57bc4d4ea2b060fc216e7a7b9e3fdb989c068ab7731cd2d5e9c67 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:39.412404 containerd[2455]: time="2026-06-12T23:04:39.412370746Z" level=info msg="shim disconnected" id=1d2fda8f89e57bc4d4ea2b060fc216e7a7b9e3fdb989c068ab7731cd2d5e9c67 namespace=moby Jun 12 23:04:39.412404 containerd[2455]: time="2026-06-12T23:04:39.412405392Z" level=info msg="cleaning up after shim disconnected" id=1d2fda8f89e57bc4d4ea2b060fc216e7a7b9e3fdb989c068ab7731cd2d5e9c67 namespace=moby Jun 12 23:04:39.412623 containerd[2455]: time="2026-06-12T23:04:39.412411288Z" level=info msg="cleaning up dead shim" id=1d2fda8f89e57bc4d4ea2b060fc216e7a7b9e3fdb989c068ab7731cd2d5e9c67 namespace=moby Jun 12 23:04:39.434381 systemd-networkd[2176]: veth1e29c29: Lost carrier Jun 12 23:04:39.436644 kernel: docker0: port 1(veth1e29c29) entered disabled state Jun 12 23:04:39.436699 kernel: vethfad7a32: renamed from eth0 Jun 12 23:04:39.452000 audit[11899]: NETFILTER_CFG table=raw:232 family=2 entries=1 op=nft_unregister_rule pid=11899 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:39.452000 audit[11899]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffdf49fc20 a2=0 a3=0 items=0 ppid=2935 pid=11899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.452000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:39.458182 systemd-networkd[2176]: veth1e29c29: Link DOWN Jun 12 23:04:39.461792 kernel: docker0: port 1(veth1e29c29) entered disabled state Jun 12 23:04:39.469699 kernel: veth1e29c29 (unregistering): left allmulticast mode Jun 12 23:04:39.469752 kernel: veth1e29c29 (unregistering): left promiscuous mode Jun 12 23:04:39.457000 audit: ANOM_PROMISCUOUS dev=veth1e29c29 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:39.470315 kernel: docker0: port 1(veth1e29c29) entered disabled state Jun 12 23:04:39.457000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b324d60 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.457000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:39.480816 systemd[1]: run-docker-netns-923f4abdb0cb.mount: Deactivated successfully. Jun 12 23:04:39.483393 systemd[1]: var-lib-docker-overlay2-2b72a859d26c75851bcf58aa7040c62bd2c66d8a110d77e2d08e2a7c3f662bc3-merged.mount: Deactivated successfully. Jun 12 23:04:39.491000 audit: BPF prog-id=529 op=UNLOAD Jun 12 23:04:39.491000 audit: BPF prog-id=533 op=UNLOAD Jun 12 23:04:39.590497 systemd[1]: var-lib-docker-overlay2-69c9195cc61e36295780f879e34b29e8109066e321fcaabb7ea57e530ac272de\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:39.654166 containerd[2455]: time="2026-06-12T23:04:39.654037152Z" level=info msg="connecting to shim f9a7e61641497d8c7f7d8528df233782c6a871fda15c44a7e140743b1a342c1b" address="unix:///run/containerd/s/f8298e5f586e5768c4e1f7ae0a77deb981a2b724ada941947cf118f831c5a326" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:39.672935 systemd[1]: Started docker-f9a7e61641497d8c7f7d8528df233782c6a871fda15c44a7e140743b1a342c1b.scope - libcontainer container f9a7e61641497d8c7f7d8528df233782c6a871fda15c44a7e140743b1a342c1b. Jun 12 23:04:39.680000 audit: BPF prog-id=534 op=LOAD Jun 12 23:04:39.680000 audit: BPF prog-id=535 op=LOAD Jun 12 23:04:39.680000 audit[11930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=cb0490c7f80 a2=98 a3=0 items=0 ppid=11918 pid=11930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396137653631363431343937643863376637643835323864 Jun 12 23:04:39.680000 audit: BPF prog-id=535 op=UNLOAD Jun 12 23:04:39.680000 audit[11930]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11918 pid=11930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396137653631363431343937643863376637643835323864 Jun 12 23:04:39.680000 audit: BPF prog-id=536 op=LOAD Jun 12 23:04:39.680000 audit[11930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=cb0490c8258 a2=98 a3=0 items=0 ppid=11918 pid=11930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396137653631363431343937643863376637643835323864 Jun 12 23:04:39.680000 audit: BPF prog-id=537 op=LOAD Jun 12 23:04:39.680000 audit[11930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=cb0490c7f98 a2=98 a3=0 items=0 ppid=11918 pid=11930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396137653631363431343937643863376637643835323864 Jun 12 23:04:39.680000 audit: BPF prog-id=537 op=UNLOAD Jun 12 23:04:39.680000 audit[11930]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11918 pid=11930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396137653631363431343937643863376637643835323864 Jun 12 23:04:39.680000 audit: BPF prog-id=536 op=UNLOAD Jun 12 23:04:39.680000 audit[11930]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11918 pid=11930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396137653631363431343937643863376637643835323864 Jun 12 23:04:39.680000 audit: BPF prog-id=538 op=LOAD Jun 12 23:04:39.680000 audit[11930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=cb0490c84a8 a2=98 a3=0 items=0 ppid=11918 pid=11930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F66396137653631363431343937643863376637643835323864 Jun 12 23:04:39.694621 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:39.703121 kernel: docker0: port 1(vethc893231) entered blocking state Jun 12 23:04:39.703182 kernel: docker0: port 1(vethc893231) entered disabled state Jun 12 23:04:39.705992 kernel: vethc893231: entered allmulticast mode Jun 12 23:04:39.709086 kernel: vethc893231: entered promiscuous mode Jun 12 23:04:39.693000 audit: ANOM_PROMISCUOUS dev=vethc893231 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:39.693000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f9230 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.693000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:39.710000 audit[11952]: NETFILTER_CFG table=raw:233 family=2 entries=1 op=nft_register_rule pid=11952 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:39.710000 audit[11952]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffa6f77a0 a2=0 a3=0 items=0 ppid=2935 pid=11952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:39.710000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:39.712025 systemd-networkd[2176]: vethc893231: Link UP Jun 12 23:04:39.731784 kernel: eth0: renamed from vethacb9f61 Jun 12 23:04:39.731859 kernel: docker0: port 1(vethc893231) entered blocking state Jun 12 23:04:39.731887 kernel: docker0: port 1(vethc893231) entered forwarding state Jun 12 23:04:39.735265 systemd-networkd[2176]: vethc893231: Gained carrier Jun 12 23:04:39.735450 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:40.761825 systemd[1]: docker-f9a7e61641497d8c7f7d8528df233782c6a871fda15c44a7e140743b1a342c1b.scope: Deactivated successfully. Jun 12 23:04:40.775047 containerd[2455]: time="2026-06-12T23:04:40.775008870Z" level=info msg="shim disconnected" id=f9a7e61641497d8c7f7d8528df233782c6a871fda15c44a7e140743b1a342c1b namespace=moby Jun 12 23:04:40.775047 containerd[2455]: time="2026-06-12T23:04:40.775039764Z" level=info msg="cleaning up after shim disconnected" id=f9a7e61641497d8c7f7d8528df233782c6a871fda15c44a7e140743b1a342c1b namespace=moby Jun 12 23:04:40.775047 containerd[2455]: time="2026-06-12T23:04:40.775045411Z" level=info msg="cleaning up dead shim" id=f9a7e61641497d8c7f7d8528df233782c6a871fda15c44a7e140743b1a342c1b namespace=moby Jun 12 23:04:40.776222 dockerd[2935]: time="2026-06-12T23:04:40.776183423Z" level=info msg="ignoring event" container=f9a7e61641497d8c7f7d8528df233782c6a871fda15c44a7e140743b1a342c1b module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:40.795856 kernel: docker0: port 1(vethc893231) entered disabled state Jun 12 23:04:40.795866 systemd-networkd[2176]: vethc893231: Lost carrier Jun 12 23:04:40.799788 kernel: vethacb9f61: renamed from eth0 Jun 12 23:04:40.811000 audit[11982]: NETFILTER_CFG table=raw:234 family=2 entries=1 op=nft_unregister_rule pid=11982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:40.811000 audit[11982]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd20fea60 a2=0 a3=0 items=0 ppid=2935 pid=11982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:40.811000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:40.818267 systemd-networkd[2176]: vethc893231: Link DOWN Jun 12 23:04:40.823018 kernel: docker0: port 1(vethc893231) entered disabled state Jun 12 23:04:40.823075 kernel: vethc893231 (unregistering): left allmulticast mode Jun 12 23:04:40.830139 kernel: vethc893231 (unregistering): left promiscuous mode Jun 12 23:04:40.830857 kernel: docker0: port 1(vethc893231) entered disabled state Jun 12 23:04:40.817000 audit: ANOM_PROMISCUOUS dev=vethc893231 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:40.817000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb315e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:40.817000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:40.844666 systemd[1]: run-docker-netns-b12e2425f854.mount: Deactivated successfully. Jun 12 23:04:40.847685 systemd[1]: var-lib-docker-overlay2-69c9195cc61e36295780f879e34b29e8109066e321fcaabb7ea57e530ac272de-merged.mount: Deactivated successfully. Jun 12 23:04:40.860000 audit: BPF prog-id=534 op=UNLOAD Jun 12 23:04:40.860000 audit: BPF prog-id=538 op=UNLOAD Jun 12 23:04:41.013443 containerd[2455]: time="2026-06-12T23:04:41.013191086Z" level=info msg="connecting to shim dadfffe5ab4e8e2b09acd56019cef3655b00ca4e1197a8253e8d32e5d1f83cb3" address="unix:///run/containerd/s/5f717d1620d4596afef672fc4a94d7001ecb65332f916f75a6cc1878b58c2c7f" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:41.029916 systemd[1]: Started docker-dadfffe5ab4e8e2b09acd56019cef3655b00ca4e1197a8253e8d32e5d1f83cb3.scope - libcontainer container dadfffe5ab4e8e2b09acd56019cef3655b00ca4e1197a8253e8d32e5d1f83cb3. Jun 12 23:04:41.037000 audit: BPF prog-id=539 op=LOAD Jun 12 23:04:41.037000 audit: BPF prog-id=540 op=LOAD Jun 12 23:04:41.037000 audit[12010]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=602f049d7f80 a2=98 a3=0 items=0 ppid=11997 pid=12010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:41.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616466666665356162346538653262303961636435363031 Jun 12 23:04:41.037000 audit: BPF prog-id=540 op=UNLOAD Jun 12 23:04:41.037000 audit[12010]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11997 pid=12010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:41.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616466666665356162346538653262303961636435363031 Jun 12 23:04:41.037000 audit: BPF prog-id=541 op=LOAD Jun 12 23:04:41.037000 audit[12010]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=602f049d8258 a2=98 a3=0 items=0 ppid=11997 pid=12010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:41.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616466666665356162346538653262303961636435363031 Jun 12 23:04:41.037000 audit: BPF prog-id=542 op=LOAD Jun 12 23:04:41.037000 audit[12010]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=602f049d7f98 a2=98 a3=0 items=0 ppid=11997 pid=12010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:41.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616466666665356162346538653262303961636435363031 Jun 12 23:04:41.037000 audit: BPF prog-id=542 op=UNLOAD Jun 12 23:04:41.037000 audit[12010]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=11997 pid=12010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:41.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616466666665356162346538653262303961636435363031 Jun 12 23:04:41.037000 audit: BPF prog-id=541 op=UNLOAD Jun 12 23:04:41.037000 audit[12010]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=11997 pid=12010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:41.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616466666665356162346538653262303961636435363031 Jun 12 23:04:41.037000 audit: BPF prog-id=543 op=LOAD Jun 12 23:04:41.037000 audit[12010]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=602f049d84a8 a2=98 a3=0 items=0 ppid=11997 pid=12010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:41.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64616466666665356162346538653262303961636435363031 Jun 12 23:04:41.049955 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:41.058652 kernel: docker0: port 1(vethd5d372e) entered blocking state Jun 12 23:04:41.058728 kernel: docker0: port 1(vethd5d372e) entered disabled state Jun 12 23:04:41.062021 kernel: vethd5d372e: entered allmulticast mode Jun 12 23:04:41.065038 kernel: vethd5d372e: entered promiscuous mode Jun 12 23:04:41.049000 audit: ANOM_PROMISCUOUS dev=vethd5d372e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:41.049000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52ef60 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:41.049000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:41.068000 audit[12030]: NETFILTER_CFG table=raw:235 family=2 entries=1 op=nft_register_rule pid=12030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:41.068000 audit[12030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdc6a0310 a2=0 a3=0 items=0 ppid=2935 pid=12030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:41.068000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:41.070275 systemd-networkd[2176]: vethd5d372e: Link UP Jun 12 23:04:41.084796 kernel: eth0: renamed from vethe7f8bb1 Jun 12 23:04:41.086534 kernel: docker0: port 1(vethd5d372e) entered blocking state Jun 12 23:04:41.092264 kernel: docker0: port 1(vethd5d372e) entered forwarding state Jun 12 23:04:41.092550 systemd-networkd[2176]: vethd5d372e: Gained carrier Jun 12 23:04:41.093157 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:42.117505 systemd[1]: docker-dadfffe5ab4e8e2b09acd56019cef3655b00ca4e1197a8253e8d32e5d1f83cb3.scope: Deactivated successfully. Jun 12 23:04:42.128369 containerd[2455]: time="2026-06-12T23:04:42.128314687Z" level=info msg="shim disconnected" id=dadfffe5ab4e8e2b09acd56019cef3655b00ca4e1197a8253e8d32e5d1f83cb3 namespace=moby Jun 12 23:04:42.128369 containerd[2455]: time="2026-06-12T23:04:42.128343312Z" level=info msg="cleaning up after shim disconnected" id=dadfffe5ab4e8e2b09acd56019cef3655b00ca4e1197a8253e8d32e5d1f83cb3 namespace=moby Jun 12 23:04:42.128369 containerd[2455]: time="2026-06-12T23:04:42.128349037Z" level=info msg="cleaning up dead shim" id=dadfffe5ab4e8e2b09acd56019cef3655b00ca4e1197a8253e8d32e5d1f83cb3 namespace=moby Jun 12 23:04:42.149805 kernel: docker0: port 1(vethd5d372e) entered disabled state Jun 12 23:04:42.149986 systemd-networkd[2176]: vethd5d372e: Lost carrier Jun 12 23:04:42.153798 kernel: vethe7f8bb1: renamed from eth0 Jun 12 23:04:42.164000 audit[12061]: NETFILTER_CFG table=raw:236 family=2 entries=1 op=nft_unregister_rule pid=12061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:42.168675 kernel: kauditd_printk_skb: 134 callbacks suppressed Jun 12 23:04:42.168727 kernel: audit: type=1325 audit(1781305482.164:2075): table=raw:236 family=2 entries=1 op=nft_unregister_rule pid=12061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:42.164000 audit[12061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe8009f70 a2=0 a3=0 items=0 ppid=2935 pid=12061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.199201 kernel: audit: type=1300 audit(1781305482.164:2075): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe8009f70 a2=0 a3=0 items=0 ppid=2935 pid=12061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.164000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:42.212687 kernel: audit: type=1327 audit(1781305482.164:2075): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:42.213858 systemd-networkd[2176]: vethd5d372e: Link DOWN Jun 12 23:04:42.222030 kernel: docker0: port 1(vethd5d372e) entered disabled state Jun 12 23:04:42.222112 kernel: vethd5d372e (unregistering): left allmulticast mode Jun 12 23:04:42.226217 kernel: vethd5d372e (unregistering): left promiscuous mode Jun 12 23:04:42.212000 audit: ANOM_PROMISCUOUS dev=vethd5d372e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:42.232122 kernel: docker0: port 1(vethd5d372e) entered disabled state Jun 12 23:04:42.232146 kernel: audit: type=1700 audit(1781305482.212:2076): dev=vethd5d372e prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:42.212000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe960 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.212000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:42.282086 kernel: audit: type=1300 audit(1781305482.212:2076): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe960 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.282169 kernel: audit: type=1327 audit(1781305482.212:2076): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:42.284420 systemd[1]: run-docker-netns-55ee09c7c863.mount: Deactivated successfully. Jun 12 23:04:42.290394 systemd[1]: var-lib-docker-overlay2-aa66483db2461bfcda4984c64f3d00598c5b63563723da0a4134306cb5049377-merged.mount: Deactivated successfully. Jun 12 23:04:42.295000 audit: BPF prog-id=539 op=UNLOAD Jun 12 23:04:42.295000 audit: BPF prog-id=543 op=UNLOAD Jun 12 23:04:42.327482 kernel: audit: type=1334 audit(1781305482.295:2077): prog-id=539 op=UNLOAD Jun 12 23:04:42.327555 kernel: audit: type=1334 audit(1781305482.295:2078): prog-id=543 op=UNLOAD Jun 12 23:04:42.460308 containerd[2455]: time="2026-06-12T23:04:42.460196579Z" level=info msg="connecting to shim 97dbb71a9d683963b1fba9612348080e55e21ca20fe08428c92928cb0615b605" address="unix:///run/containerd/s/10cf8c21ff9effad2df014603bd69dcf5b487ecbeb9a4f08166db932ff1447cf" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:42.480930 systemd[1]: Started docker-97dbb71a9d683963b1fba9612348080e55e21ca20fe08428c92928cb0615b605.scope - libcontainer container 97dbb71a9d683963b1fba9612348080e55e21ca20fe08428c92928cb0615b605. Jun 12 23:04:42.490000 audit: BPF prog-id=544 op=LOAD Jun 12 23:04:42.491000 audit: BPF prog-id=545 op=LOAD Jun 12 23:04:42.491000 audit[12092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=23e8e055bf80 a2=98 a3=0 items=0 ppid=12081 pid=12092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376462623731613964363833393633623166626139363132 Jun 12 23:04:42.495000 audit: BPF prog-id=545 op=UNLOAD Jun 12 23:04:42.495000 audit[12092]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12081 pid=12092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376462623731613964363833393633623166626139363132 Jun 12 23:04:42.495000 audit: BPF prog-id=546 op=LOAD Jun 12 23:04:42.495000 audit[12092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=23e8e055c258 a2=98 a3=0 items=0 ppid=12081 pid=12092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376462623731613964363833393633623166626139363132 Jun 12 23:04:42.499000 audit: BPF prog-id=547 op=LOAD Jun 12 23:04:42.499000 audit[12092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=23e8e055bf98 a2=98 a3=0 items=0 ppid=12081 pid=12092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376462623731613964363833393633623166626139363132 Jun 12 23:04:42.500000 audit: BPF prog-id=547 op=UNLOAD Jun 12 23:04:42.500000 audit[12092]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12081 pid=12092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376462623731613964363833393633623166626139363132 Jun 12 23:04:42.500000 audit: BPF prog-id=546 op=UNLOAD Jun 12 23:04:42.500000 audit[12092]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12081 pid=12092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376462623731613964363833393633623166626139363132 Jun 12 23:04:42.500000 audit: BPF prog-id=548 op=LOAD Jun 12 23:04:42.500000 audit[12092]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=23e8e055c4a8 a2=98 a3=0 items=0 ppid=12081 pid=12092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39376462623731613964363833393633623166626139363132 Jun 12 23:04:42.501721 kernel: audit: type=1334 audit(1781305482.490:2079): prog-id=544 op=LOAD Jun 12 23:04:42.501760 kernel: audit: type=1334 audit(1781305482.491:2080): prog-id=545 op=LOAD Jun 12 23:04:42.516103 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:42.523799 kernel: docker0: port 1(veth6298c7f) entered blocking state Jun 12 23:04:42.523874 kernel: docker0: port 1(veth6298c7f) entered disabled state Jun 12 23:04:42.526932 kernel: veth6298c7f: entered allmulticast mode Jun 12 23:04:42.529823 kernel: veth6298c7f: entered promiscuous mode Jun 12 23:04:42.515000 audit: ANOM_PROMISCUOUS dev=veth6298c7f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:42.515000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b944690 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.515000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:42.531000 audit[12115]: NETFILTER_CFG table=raw:237 family=2 entries=1 op=nft_register_rule pid=12115 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:42.531000 audit[12115]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcb443c40 a2=0 a3=0 items=0 ppid=2935 pid=12115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:42.531000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:42.532969 systemd-networkd[2176]: veth6298c7f: Link UP Jun 12 23:04:42.549797 kernel: eth0: renamed from veth3662d91 Jun 12 23:04:42.557568 kernel: docker0: port 1(veth6298c7f) entered blocking state Jun 12 23:04:42.557615 kernel: docker0: port 1(veth6298c7f) entered forwarding state Jun 12 23:04:42.557936 systemd-networkd[2176]: veth6298c7f: Gained carrier Jun 12 23:04:42.558563 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:43.584661 systemd[1]: docker-97dbb71a9d683963b1fba9612348080e55e21ca20fe08428c92928cb0615b605.scope: Deactivated successfully. Jun 12 23:04:43.597937 dockerd[2935]: time="2026-06-12T23:04:43.597894977Z" level=info msg="ignoring event" container=97dbb71a9d683963b1fba9612348080e55e21ca20fe08428c92928cb0615b605 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:43.598670 containerd[2455]: time="2026-06-12T23:04:43.598429260Z" level=info msg="shim disconnected" id=97dbb71a9d683963b1fba9612348080e55e21ca20fe08428c92928cb0615b605 namespace=moby Jun 12 23:04:43.598670 containerd[2455]: time="2026-06-12T23:04:43.598454849Z" level=info msg="cleaning up after shim disconnected" id=97dbb71a9d683963b1fba9612348080e55e21ca20fe08428c92928cb0615b605 namespace=moby Jun 12 23:04:43.598670 containerd[2455]: time="2026-06-12T23:04:43.598460969Z" level=info msg="cleaning up dead shim" id=97dbb71a9d683963b1fba9612348080e55e21ca20fe08428c92928cb0615b605 namespace=moby Jun 12 23:04:43.619098 systemd-networkd[2176]: veth6298c7f: Lost carrier Jun 12 23:04:43.622419 kernel: docker0: port 1(veth6298c7f) entered disabled state Jun 12 23:04:43.622482 kernel: veth3662d91: renamed from eth0 Jun 12 23:04:43.634000 audit[12146]: NETFILTER_CFG table=raw:238 family=2 entries=1 op=nft_unregister_rule pid=12146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:43.634000 audit[12146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc761e000 a2=0 a3=0 items=0 ppid=2935 pid=12146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.634000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:43.645221 systemd-networkd[2176]: veth6298c7f: Link DOWN Jun 12 23:04:43.649947 kernel: docker0: port 1(veth6298c7f) entered disabled state Jun 12 23:04:43.650022 kernel: veth6298c7f (unregistering): left allmulticast mode Jun 12 23:04:43.656816 kernel: veth6298c7f (unregistering): left promiscuous mode Jun 12 23:04:43.643000 audit: ANOM_PROMISCUOUS dev=veth6298c7f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:43.660408 kernel: docker0: port 1(veth6298c7f) entered disabled state Jun 12 23:04:43.643000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ffb40 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.643000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:43.673417 systemd[1]: run-docker-netns-5bf49f6246a7.mount: Deactivated successfully. Jun 12 23:04:43.676655 systemd[1]: var-lib-docker-overlay2-a582984e63bf60e7bd1c3c896b39412558a1ccacebea210917b62baf6676eb89-merged.mount: Deactivated successfully. Jun 12 23:04:43.687000 audit: BPF prog-id=544 op=UNLOAD Jun 12 23:04:43.687000 audit: BPF prog-id=548 op=UNLOAD Jun 12 23:04:43.808071 systemd[1]: var-lib-docker-overlay2-334bf573174666926bdcfd48359a96d68b5b6eb19d0f783b5fe8e3812beb4d8d-merged.mount: Deactivated successfully. Jun 12 23:04:43.873639 containerd[2455]: time="2026-06-12T23:04:43.873488862Z" level=info msg="connecting to shim d00cdeb01cbdf65cf021a3c8c31758b11650486d4aab7945ddb9320e04377b12" address="unix:///run/containerd/s/edd4b5589e3fe075dccad5d207f5e98d6adc46db395ec2dc579d9f82592f3c20" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:43.894141 systemd[1]: Started docker-d00cdeb01cbdf65cf021a3c8c31758b11650486d4aab7945ddb9320e04377b12.scope - libcontainer container d00cdeb01cbdf65cf021a3c8c31758b11650486d4aab7945ddb9320e04377b12. Jun 12 23:04:43.901000 audit: BPF prog-id=549 op=LOAD Jun 12 23:04:43.901000 audit: BPF prog-id=550 op=LOAD Jun 12 23:04:43.901000 audit[12175]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1540a80b7f80 a2=98 a3=0 items=0 ppid=12164 pid=12175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64303063646562303163626466363563663032316133633863 Jun 12 23:04:43.902000 audit: BPF prog-id=550 op=UNLOAD Jun 12 23:04:43.902000 audit[12175]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12164 pid=12175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64303063646562303163626466363563663032316133633863 Jun 12 23:04:43.902000 audit: BPF prog-id=551 op=LOAD Jun 12 23:04:43.902000 audit[12175]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1540a80b8258 a2=98 a3=0 items=0 ppid=12164 pid=12175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64303063646562303163626466363563663032316133633863 Jun 12 23:04:43.902000 audit: BPF prog-id=552 op=LOAD Jun 12 23:04:43.902000 audit[12175]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1540a80b7f98 a2=98 a3=0 items=0 ppid=12164 pid=12175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64303063646562303163626466363563663032316133633863 Jun 12 23:04:43.902000 audit: BPF prog-id=552 op=UNLOAD Jun 12 23:04:43.902000 audit[12175]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12164 pid=12175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64303063646562303163626466363563663032316133633863 Jun 12 23:04:43.902000 audit: BPF prog-id=551 op=UNLOAD Jun 12 23:04:43.902000 audit[12175]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12164 pid=12175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64303063646562303163626466363563663032316133633863 Jun 12 23:04:43.902000 audit: BPF prog-id=553 op=LOAD Jun 12 23:04:43.902000 audit[12175]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1540a80b84a8 a2=98 a3=0 items=0 ppid=12164 pid=12175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.902000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64303063646562303163626466363563663032316133633863 Jun 12 23:04:43.917818 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:43.922544 kernel: docker0: port 1(veth0264145) entered blocking state Jun 12 23:04:43.922598 kernel: docker0: port 1(veth0264145) entered disabled state Jun 12 23:04:43.928863 kernel: veth0264145: entered allmulticast mode Jun 12 23:04:43.928930 kernel: veth0264145: entered promiscuous mode Jun 12 23:04:43.913000 audit: ANOM_PROMISCUOUS dev=veth0264145 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:43.913000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b9446c0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.913000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:43.929000 audit[12195]: NETFILTER_CFG table=raw:239 family=2 entries=1 op=nft_register_rule pid=12195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:43.929000 audit[12195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffda697420 a2=0 a3=0 items=0 ppid=2935 pid=12195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:43.929000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:43.931509 systemd-networkd[2176]: veth0264145: Link UP Jun 12 23:04:43.950808 kernel: eth0: renamed from veth8564e00 Jun 12 23:04:43.953891 kernel: docker0: port 1(veth0264145) entered blocking state Jun 12 23:04:43.958480 kernel: docker0: port 1(veth0264145) entered forwarding state Jun 12 23:04:43.958805 systemd-networkd[2176]: veth0264145: Gained carrier Jun 12 23:04:43.959135 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:44.983524 systemd[1]: docker-d00cdeb01cbdf65cf021a3c8c31758b11650486d4aab7945ddb9320e04377b12.scope: Deactivated successfully. Jun 12 23:04:44.995834 dockerd[2935]: time="2026-06-12T23:04:44.995755744Z" level=info msg="ignoring event" container=d00cdeb01cbdf65cf021a3c8c31758b11650486d4aab7945ddb9320e04377b12 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:44.996399 containerd[2455]: time="2026-06-12T23:04:44.995667961Z" level=info msg="shim disconnected" id=d00cdeb01cbdf65cf021a3c8c31758b11650486d4aab7945ddb9320e04377b12 namespace=moby Jun 12 23:04:44.996399 containerd[2455]: time="2026-06-12T23:04:44.996192293Z" level=info msg="cleaning up after shim disconnected" id=d00cdeb01cbdf65cf021a3c8c31758b11650486d4aab7945ddb9320e04377b12 namespace=moby Jun 12 23:04:44.996399 containerd[2455]: time="2026-06-12T23:04:44.996201004Z" level=info msg="cleaning up dead shim" id=d00cdeb01cbdf65cf021a3c8c31758b11650486d4aab7945ddb9320e04377b12 namespace=moby Jun 12 23:04:45.024406 systemd-networkd[2176]: veth0264145: Lost carrier Jun 12 23:04:45.024999 kernel: docker0: port 1(veth0264145) entered disabled state Jun 12 23:04:45.028805 kernel: veth8564e00: renamed from eth0 Jun 12 23:04:45.043000 audit[12226]: NETFILTER_CFG table=raw:240 family=2 entries=1 op=nft_unregister_rule pid=12226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:45.043000 audit[12226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc1769b90 a2=0 a3=0 items=0 ppid=2935 pid=12226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.043000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:45.050308 systemd-networkd[2176]: veth0264145: Link DOWN Jun 12 23:04:45.055926 kernel: docker0: port 1(veth0264145) entered disabled state Jun 12 23:04:45.064727 kernel: veth0264145 (unregistering): left allmulticast mode Jun 12 23:04:45.064824 kernel: veth0264145 (unregistering): left promiscuous mode Jun 12 23:04:45.049000 audit: ANOM_PROMISCUOUS dev=veth0264145 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:45.068597 kernel: docker0: port 1(veth0264145) entered disabled state Jun 12 23:04:45.049000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6620 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.049000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:45.081462 systemd[1]: run-docker-netns-4eab80e3b2b5.mount: Deactivated successfully. Jun 12 23:04:45.087502 systemd[1]: var-lib-docker-overlay2-334bf573174666926bdcfd48359a96d68b5b6eb19d0f783b5fe8e3812beb4d8d-merged.mount: Deactivated successfully. Jun 12 23:04:45.095000 audit: BPF prog-id=549 op=UNLOAD Jun 12 23:04:45.095000 audit: BPF prog-id=553 op=UNLOAD Jun 12 23:04:45.257580 containerd[2455]: time="2026-06-12T23:04:45.257482350Z" level=info msg="connecting to shim e9dbf2960bf8913fc7ad8254f6b9deb728df5f98df02da5503dd82816f843db2" address="unix:///run/containerd/s/370e71c72dfaa03575a0f5453c0cb574a59704985cc8f5260f32a91cbb69d804" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:45.276921 systemd[1]: Started docker-e9dbf2960bf8913fc7ad8254f6b9deb728df5f98df02da5503dd82816f843db2.scope - libcontainer container e9dbf2960bf8913fc7ad8254f6b9deb728df5f98df02da5503dd82816f843db2. Jun 12 23:04:45.284000 audit: BPF prog-id=554 op=LOAD Jun 12 23:04:45.284000 audit: BPF prog-id=555 op=LOAD Jun 12 23:04:45.284000 audit[12256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=219aa89f1f80 a2=98 a3=0 items=0 ppid=12244 pid=12256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396462663239363062663839313366633761643832353466 Jun 12 23:04:45.284000 audit: BPF prog-id=555 op=UNLOAD Jun 12 23:04:45.284000 audit[12256]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12244 pid=12256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396462663239363062663839313366633761643832353466 Jun 12 23:04:45.284000 audit: BPF prog-id=556 op=LOAD Jun 12 23:04:45.284000 audit[12256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=219aa89f2258 a2=98 a3=0 items=0 ppid=12244 pid=12256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396462663239363062663839313366633761643832353466 Jun 12 23:04:45.285000 audit: BPF prog-id=557 op=LOAD Jun 12 23:04:45.285000 audit[12256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=219aa89f1f98 a2=98 a3=0 items=0 ppid=12244 pid=12256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396462663239363062663839313366633761643832353466 Jun 12 23:04:45.285000 audit: BPF prog-id=557 op=UNLOAD Jun 12 23:04:45.285000 audit[12256]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12244 pid=12256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396462663239363062663839313366633761643832353466 Jun 12 23:04:45.285000 audit: BPF prog-id=556 op=UNLOAD Jun 12 23:04:45.285000 audit[12256]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12244 pid=12256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396462663239363062663839313366633761643832353466 Jun 12 23:04:45.285000 audit: BPF prog-id=558 op=LOAD Jun 12 23:04:45.285000 audit[12256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=219aa89f24a8 a2=98 a3=0 items=0 ppid=12244 pid=12256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F65396462663239363062663839313366633761643832353466 Jun 12 23:04:45.301406 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:45.305386 kernel: docker0: port 1(veth48de1dd) entered blocking state Jun 12 23:04:45.305457 kernel: docker0: port 1(veth48de1dd) entered disabled state Jun 12 23:04:45.308841 kernel: veth48de1dd: entered allmulticast mode Jun 12 23:04:45.311879 kernel: veth48de1dd: entered promiscuous mode Jun 12 23:04:45.296000 audit: ANOM_PROMISCUOUS dev=veth48de1dd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:45.296000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beab200 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.296000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:45.313000 audit[12276]: NETFILTER_CFG table=raw:241 family=2 entries=1 op=nft_register_rule pid=12276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:45.313000 audit[12276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdeed6200 a2=0 a3=0 items=0 ppid=2935 pid=12276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:45.313000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:45.314970 systemd-networkd[2176]: veth48de1dd: Link UP Jun 12 23:04:45.330806 kernel: eth0: renamed from veth7a9a0e2 Jun 12 23:04:45.338637 kernel: docker0: port 1(veth48de1dd) entered blocking state Jun 12 23:04:45.338707 kernel: docker0: port 1(veth48de1dd) entered forwarding state Jun 12 23:04:45.338874 systemd-networkd[2176]: veth48de1dd: Gained carrier Jun 12 23:04:45.339425 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:46.365031 systemd[1]: docker-e9dbf2960bf8913fc7ad8254f6b9deb728df5f98df02da5503dd82816f843db2.scope: Deactivated successfully. Jun 12 23:04:46.375905 dockerd[2935]: time="2026-06-12T23:04:46.375857181Z" level=info msg="ignoring event" container=e9dbf2960bf8913fc7ad8254f6b9deb728df5f98df02da5503dd82816f843db2 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:46.376880 containerd[2455]: time="2026-06-12T23:04:46.376808902Z" level=info msg="shim disconnected" id=e9dbf2960bf8913fc7ad8254f6b9deb728df5f98df02da5503dd82816f843db2 namespace=moby Jun 12 23:04:46.376880 containerd[2455]: time="2026-06-12T23:04:46.376837371Z" level=info msg="cleaning up after shim disconnected" id=e9dbf2960bf8913fc7ad8254f6b9deb728df5f98df02da5503dd82816f843db2 namespace=moby Jun 12 23:04:46.376880 containerd[2455]: time="2026-06-12T23:04:46.376843123Z" level=info msg="cleaning up dead shim" id=e9dbf2960bf8913fc7ad8254f6b9deb728df5f98df02da5503dd82816f843db2 namespace=moby Jun 12 23:04:46.401808 kernel: docker0: port 1(veth48de1dd) entered disabled state Jun 12 23:04:46.401988 systemd-networkd[2176]: veth48de1dd: Lost carrier Jun 12 23:04:46.405801 kernel: veth7a9a0e2: renamed from eth0 Jun 12 23:04:46.419000 audit[12308]: NETFILTER_CFG table=raw:242 family=2 entries=1 op=nft_unregister_rule pid=12308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:46.419000 audit[12308]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff7c82ff0 a2=0 a3=0 items=0 ppid=2935 pid=12308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.419000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:46.433182 systemd-networkd[2176]: veth48de1dd: Link DOWN Jun 12 23:04:46.437875 kernel: docker0: port 1(veth48de1dd) entered disabled state Jun 12 23:04:46.445388 kernel: veth48de1dd (unregistering): left allmulticast mode Jun 12 23:04:46.445454 kernel: veth48de1dd (unregistering): left promiscuous mode Jun 12 23:04:46.432000 audit: ANOM_PROMISCUOUS dev=veth48de1dd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:46.449184 kernel: docker0: port 1(veth48de1dd) entered disabled state Jun 12 23:04:46.432000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8dbda0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.432000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:46.460492 systemd[1]: run-docker-netns-10d78419a5ea.mount: Deactivated successfully. Jun 12 23:04:46.464056 systemd[1]: var-lib-docker-overlay2-7104a81a1c8d5149ecc5f050e8298a7224572e02d5c5b35c6910e347a74a3617-merged.mount: Deactivated successfully. Jun 12 23:04:46.471000 audit: BPF prog-id=554 op=UNLOAD Jun 12 23:04:46.471000 audit: BPF prog-id=558 op=UNLOAD Jun 12 23:04:46.531689 systemd[1]: var-lib-docker-overlay2-6c886c61de5e9339df9dfc53a3b4aeb74fb0031bb042fb8ae0aefe5bba6a04ad\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:46.601222 containerd[2455]: time="2026-06-12T23:04:46.600843928Z" level=info msg="connecting to shim ac07baf688fcc1667aec9ca799cde88f90fe463d7a4dbcff7f44ea8bcbfc7200" address="unix:///run/containerd/s/089ceefa7c989051d65c1a3d37690f3597ed75f84a5fb92c7c7ab2cf61a69b57" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:46.619935 systemd[1]: Started docker-ac07baf688fcc1667aec9ca799cde88f90fe463d7a4dbcff7f44ea8bcbfc7200.scope - libcontainer container ac07baf688fcc1667aec9ca799cde88f90fe463d7a4dbcff7f44ea8bcbfc7200. Jun 12 23:04:46.627000 audit: BPF prog-id=559 op=LOAD Jun 12 23:04:46.627000 audit: BPF prog-id=560 op=LOAD Jun 12 23:04:46.627000 audit[12338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1e3fcd95ff80 a2=98 a3=0 items=0 ppid=12326 pid=12338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633037626166363838666363313636376165633963613739 Jun 12 23:04:46.627000 audit: BPF prog-id=560 op=UNLOAD Jun 12 23:04:46.627000 audit[12338]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12326 pid=12338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633037626166363838666363313636376165633963613739 Jun 12 23:04:46.627000 audit: BPF prog-id=561 op=LOAD Jun 12 23:04:46.627000 audit[12338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1e3fcd960258 a2=98 a3=0 items=0 ppid=12326 pid=12338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633037626166363838666363313636376165633963613739 Jun 12 23:04:46.627000 audit: BPF prog-id=562 op=LOAD Jun 12 23:04:46.627000 audit[12338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=1e3fcd95ff98 a2=98 a3=0 items=0 ppid=12326 pid=12338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633037626166363838666363313636376165633963613739 Jun 12 23:04:46.627000 audit: BPF prog-id=562 op=UNLOAD Jun 12 23:04:46.627000 audit[12338]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12326 pid=12338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633037626166363838666363313636376165633963613739 Jun 12 23:04:46.627000 audit: BPF prog-id=561 op=UNLOAD Jun 12 23:04:46.627000 audit[12338]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12326 pid=12338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633037626166363838666363313636376165633963613739 Jun 12 23:04:46.627000 audit: BPF prog-id=563 op=LOAD Jun 12 23:04:46.627000 audit[12338]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=1e3fcd9604a8 a2=98 a3=0 items=0 ppid=12326 pid=12338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F61633037626166363838666363313636376165633963613739 Jun 12 23:04:46.646958 kernel: docker0: port 1(vethc62de93) entered blocking state Jun 12 23:04:46.647033 kernel: docker0: port 1(vethc62de93) entered disabled state Jun 12 23:04:46.649772 kernel: vethc62de93: entered allmulticast mode Jun 12 23:04:46.652536 kernel: vethc62de93: entered promiscuous mode Jun 12 23:04:46.639000 audit: ANOM_PROMISCUOUS dev=vethc62de93 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:46.639000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f8210 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.639000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:46.653223 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:46.654000 audit[12359]: NETFILTER_CFG table=raw:243 family=2 entries=1 op=nft_register_rule pid=12359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:46.654000 audit[12359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd2e30f50 a2=0 a3=0 items=0 ppid=2935 pid=12359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:46.654000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:46.655628 systemd-networkd[2176]: vethc62de93: Link UP Jun 12 23:04:46.682799 kernel: eth0: renamed from vethd8f2be9 Jun 12 23:04:46.682895 kernel: docker0: port 1(vethc62de93) entered blocking state Jun 12 23:04:46.682917 kernel: docker0: port 1(vethc62de93) entered forwarding state Jun 12 23:04:46.684912 systemd-networkd[2176]: vethc62de93: Gained carrier Jun 12 23:04:46.685328 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:47.710428 systemd[1]: docker-ac07baf688fcc1667aec9ca799cde88f90fe463d7a4dbcff7f44ea8bcbfc7200.scope: Deactivated successfully. Jun 12 23:04:47.723198 dockerd[2935]: time="2026-06-12T23:04:47.723153317Z" level=info msg="ignoring event" container=ac07baf688fcc1667aec9ca799cde88f90fe463d7a4dbcff7f44ea8bcbfc7200 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:47.724134 containerd[2455]: time="2026-06-12T23:04:47.724059930Z" level=info msg="shim disconnected" id=ac07baf688fcc1667aec9ca799cde88f90fe463d7a4dbcff7f44ea8bcbfc7200 namespace=moby Jun 12 23:04:47.724134 containerd[2455]: time="2026-06-12T23:04:47.724098167Z" level=info msg="cleaning up after shim disconnected" id=ac07baf688fcc1667aec9ca799cde88f90fe463d7a4dbcff7f44ea8bcbfc7200 namespace=moby Jun 12 23:04:47.724134 containerd[2455]: time="2026-06-12T23:04:47.724104182Z" level=info msg="cleaning up dead shim" id=ac07baf688fcc1667aec9ca799cde88f90fe463d7a4dbcff7f44ea8bcbfc7200 namespace=moby Jun 12 23:04:47.746208 systemd-networkd[2176]: vethc62de93: Lost carrier Jun 12 23:04:47.746831 kernel: docker0: port 1(vethc62de93) entered disabled state Jun 12 23:04:47.746888 kernel: vethd8f2be9: renamed from eth0 Jun 12 23:04:47.768000 audit[12390]: NETFILTER_CFG table=raw:244 family=2 entries=1 op=nft_unregister_rule pid=12390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:47.773012 kernel: kauditd_printk_skb: 134 callbacks suppressed Jun 12 23:04:47.773058 kernel: audit: type=1325 audit(1781305487.768:2131): table=raw:244 family=2 entries=1 op=nft_unregister_rule pid=12390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:47.768000 audit[12390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcde60660 a2=0 a3=0 items=0 ppid=2935 pid=12390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:47.801427 kernel: audit: type=1300 audit(1781305487.768:2131): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcde60660 a2=0 a3=0 items=0 ppid=2935 pid=12390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:47.768000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:47.814174 kernel: audit: type=1327 audit(1781305487.768:2131): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:47.802066 systemd-networkd[2176]: vethc62de93: Link DOWN Jun 12 23:04:47.814275 kernel: docker0: port 1(vethc62de93) entered disabled state Jun 12 23:04:47.821989 kernel: vethc62de93 (unregistering): left allmulticast mode Jun 12 23:04:47.825955 kernel: vethc62de93 (unregistering): left promiscuous mode Jun 12 23:04:47.783000 audit: ANOM_PROMISCUOUS dev=vethc62de93 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:47.830892 kernel: docker0: port 1(vethc62de93) entered disabled state Jun 12 23:04:47.830918 kernel: audit: type=1700 audit(1781305487.783:2132): dev=vethc62de93 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:47.783000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb1c00 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:47.860580 systemd[1]: run-docker-netns-51652a10d9ae.mount: Deactivated successfully. Jun 12 23:04:47.783000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:47.869922 systemd[1]: var-lib-docker-overlay2-6c886c61de5e9339df9dfc53a3b4aeb74fb0031bb042fb8ae0aefe5bba6a04ad-merged.mount: Deactivated successfully. Jun 12 23:04:47.877318 kernel: audit: type=1300 audit(1781305487.783:2132): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bcb1c00 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:47.877398 kernel: audit: type=1327 audit(1781305487.783:2132): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:47.888000 audit: BPF prog-id=559 op=UNLOAD Jun 12 23:04:47.888000 audit: BPF prog-id=563 op=UNLOAD Jun 12 23:04:47.898387 kernel: audit: type=1334 audit(1781305487.888:2133): prog-id=559 op=UNLOAD Jun 12 23:04:47.898439 kernel: audit: type=1334 audit(1781305487.888:2134): prog-id=563 op=UNLOAD Jun 12 23:04:47.989854 systemd[1]: var-lib-docker-overlay2-a7d0f8dd56a9503dbc12a6849ff2d2cfe03b0b227e8a91d288d23e7398225a5c\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:48.058884 containerd[2455]: time="2026-06-12T23:04:48.058829106Z" level=info msg="connecting to shim 9d45d3c04e9d468860fa6f5a1a009218d6c1eec62eca56fd09dce2508915f671" address="unix:///run/containerd/s/5d3c57f36a3593287fc9dc1d616fbc6b65aab79671c477888f5ad1e3ba03f53c" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:48.078926 systemd[1]: Started docker-9d45d3c04e9d468860fa6f5a1a009218d6c1eec62eca56fd09dce2508915f671.scope - libcontainer container 9d45d3c04e9d468860fa6f5a1a009218d6c1eec62eca56fd09dce2508915f671. Jun 12 23:04:48.086000 audit: BPF prog-id=564 op=LOAD Jun 12 23:04:48.091000 audit: BPF prog-id=565 op=LOAD Jun 12 23:04:48.096832 kernel: audit: type=1334 audit(1781305488.086:2135): prog-id=564 op=LOAD Jun 12 23:04:48.096892 kernel: audit: type=1334 audit(1781305488.091:2136): prog-id=565 op=LOAD Jun 12 23:04:48.091000 audit[12421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=c3474ffdf80 a2=98 a3=0 items=0 ppid=12410 pid=12421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:48.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643435643363303465396434363838363066613666356131 Jun 12 23:04:48.091000 audit: BPF prog-id=565 op=UNLOAD Jun 12 23:04:48.091000 audit[12421]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12410 pid=12421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:48.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643435643363303465396434363838363066613666356131 Jun 12 23:04:48.091000 audit: BPF prog-id=566 op=LOAD Jun 12 23:04:48.091000 audit[12421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=c3474ffe258 a2=98 a3=0 items=0 ppid=12410 pid=12421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:48.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643435643363303465396434363838363066613666356131 Jun 12 23:04:48.091000 audit: BPF prog-id=567 op=LOAD Jun 12 23:04:48.091000 audit[12421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=c3474ffdf98 a2=98 a3=0 items=0 ppid=12410 pid=12421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:48.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643435643363303465396434363838363066613666356131 Jun 12 23:04:48.091000 audit: BPF prog-id=567 op=UNLOAD Jun 12 23:04:48.091000 audit[12421]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12410 pid=12421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:48.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643435643363303465396434363838363066613666356131 Jun 12 23:04:48.091000 audit: BPF prog-id=566 op=UNLOAD Jun 12 23:04:48.091000 audit[12421]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12410 pid=12421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:48.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643435643363303465396434363838363066613666356131 Jun 12 23:04:48.091000 audit: BPF prog-id=568 op=LOAD Jun 12 23:04:48.091000 audit[12421]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=c3474ffe4a8 a2=98 a3=0 items=0 ppid=12410 pid=12421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:48.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39643435643363303465396434363838363066613666356131 Jun 12 23:04:48.115311 kernel: docker0: port 1(vethb24b488) entered blocking state Jun 12 23:04:48.115513 kernel: docker0: port 1(vethb24b488) entered disabled state Jun 12 23:04:48.119029 kernel: vethb24b488: entered allmulticast mode Jun 12 23:04:48.122285 kernel: vethb24b488: entered promiscuous mode Jun 12 23:04:48.107000 audit: ANOM_PROMISCUOUS dev=vethb24b488 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:48.107000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760ba0c4b0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:48.107000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:48.122977 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:48.124000 audit[12442]: NETFILTER_CFG table=raw:245 family=2 entries=1 op=nft_register_rule pid=12442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:48.124000 audit[12442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffb865010 a2=0 a3=0 items=0 ppid=2935 pid=12442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:48.124000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:48.126333 systemd-networkd[2176]: vethb24b488: Link UP Jun 12 23:04:48.141796 kernel: eth0: renamed from vethd964c00 Jun 12 23:04:48.149083 kernel: docker0: port 1(vethb24b488) entered blocking state Jun 12 23:04:48.149136 kernel: docker0: port 1(vethb24b488) entered forwarding state Jun 12 23:04:48.149401 systemd-networkd[2176]: vethb24b488: Gained carrier Jun 12 23:04:48.149806 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:49.176876 systemd[1]: docker-9d45d3c04e9d468860fa6f5a1a009218d6c1eec62eca56fd09dce2508915f671.scope: Deactivated successfully. Jun 12 23:04:49.188449 dockerd[2935]: time="2026-06-12T23:04:49.188355023Z" level=info msg="ignoring event" container=9d45d3c04e9d468860fa6f5a1a009218d6c1eec62eca56fd09dce2508915f671 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:49.188767 containerd[2455]: time="2026-06-12T23:04:49.188568506Z" level=info msg="shim disconnected" id=9d45d3c04e9d468860fa6f5a1a009218d6c1eec62eca56fd09dce2508915f671 namespace=moby Jun 12 23:04:49.188767 containerd[2455]: time="2026-06-12T23:04:49.188617141Z" level=info msg="cleaning up after shim disconnected" id=9d45d3c04e9d468860fa6f5a1a009218d6c1eec62eca56fd09dce2508915f671 namespace=moby Jun 12 23:04:49.188767 containerd[2455]: time="2026-06-12T23:04:49.188625596Z" level=info msg="cleaning up dead shim" id=9d45d3c04e9d468860fa6f5a1a009218d6c1eec62eca56fd09dce2508915f671 namespace=moby Jun 12 23:04:49.212867 kernel: docker0: port 1(vethb24b488) entered disabled state Jun 12 23:04:49.212904 systemd-networkd[2176]: vethb24b488: Lost carrier Jun 12 23:04:49.216801 kernel: vethd964c00: renamed from eth0 Jun 12 23:04:49.228000 audit[12474]: NETFILTER_CFG table=raw:246 family=2 entries=1 op=nft_unregister_rule pid=12474 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:49.228000 audit[12474]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffcbc95970 a2=0 a3=0 items=0 ppid=2935 pid=12474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.228000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:49.235196 systemd-networkd[2176]: vethb24b488: Link DOWN Jun 12 23:04:49.242746 kernel: docker0: port 1(vethb24b488) entered disabled state Jun 12 23:04:49.242806 kernel: vethb24b488 (unregistering): left allmulticast mode Jun 12 23:04:49.246499 kernel: vethb24b488 (unregistering): left promiscuous mode Jun 12 23:04:49.234000 audit: ANOM_PROMISCUOUS dev=vethb24b488 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:49.250440 kernel: docker0: port 1(vethb24b488) entered disabled state Jun 12 23:04:49.234000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb30b60 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.234000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:49.263037 systemd[1]: run-docker-netns-261b59b78331.mount: Deactivated successfully. Jun 12 23:04:49.266035 systemd[1]: var-lib-docker-overlay2-a7d0f8dd56a9503dbc12a6849ff2d2cfe03b0b227e8a91d288d23e7398225a5c-merged.mount: Deactivated successfully. Jun 12 23:04:49.281000 audit: BPF prog-id=564 op=UNLOAD Jun 12 23:04:49.281000 audit: BPF prog-id=568 op=UNLOAD Jun 12 23:04:49.387126 systemd[1]: var-lib-docker-overlay2-70e54a7b8c581a651d2313688d62193b7397e8644ef9630868f81e9590be5f1b\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:49.475973 containerd[2455]: time="2026-06-12T23:04:49.475928735Z" level=info msg="connecting to shim d638e073427ffb348b89912fdd184faab961c3592089a0cd859588aab3e7beda" address="unix:///run/containerd/s/8e0eeadfebd93f2f84afd70879610eb794fc1d93b4a31cf6901bb76e05e1922b" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:49.494928 systemd[1]: Started docker-d638e073427ffb348b89912fdd184faab961c3592089a0cd859588aab3e7beda.scope - libcontainer container d638e073427ffb348b89912fdd184faab961c3592089a0cd859588aab3e7beda. Jun 12 23:04:49.502000 audit: BPF prog-id=569 op=LOAD Jun 12 23:04:49.502000 audit: BPF prog-id=570 op=LOAD Jun 12 23:04:49.502000 audit[12504]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7f32fe215f80 a2=98 a3=0 items=0 ppid=12493 pid=12504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64363338653037333432376666623334386238393931326664 Jun 12 23:04:49.503000 audit: BPF prog-id=570 op=UNLOAD Jun 12 23:04:49.503000 audit[12504]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12493 pid=12504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64363338653037333432376666623334386238393931326664 Jun 12 23:04:49.503000 audit: BPF prog-id=571 op=LOAD Jun 12 23:04:49.503000 audit[12504]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7f32fe216258 a2=98 a3=0 items=0 ppid=12493 pid=12504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64363338653037333432376666623334386238393931326664 Jun 12 23:04:49.503000 audit: BPF prog-id=572 op=LOAD Jun 12 23:04:49.503000 audit[12504]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7f32fe215f98 a2=98 a3=0 items=0 ppid=12493 pid=12504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64363338653037333432376666623334386238393931326664 Jun 12 23:04:49.503000 audit: BPF prog-id=572 op=UNLOAD Jun 12 23:04:49.503000 audit[12504]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12493 pid=12504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64363338653037333432376666623334386238393931326664 Jun 12 23:04:49.503000 audit: BPF prog-id=571 op=UNLOAD Jun 12 23:04:49.503000 audit[12504]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12493 pid=12504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64363338653037333432376666623334386238393931326664 Jun 12 23:04:49.503000 audit: BPF prog-id=573 op=LOAD Jun 12 23:04:49.503000 audit[12504]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7f32fe2164a8 a2=98 a3=0 items=0 ppid=12493 pid=12504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64363338653037333432376666623334386238393931326664 Jun 12 23:04:49.523818 kernel: docker0: port 1(veth43e5e1f) entered blocking state Jun 12 23:04:49.523906 kernel: docker0: port 1(veth43e5e1f) entered disabled state Jun 12 23:04:49.526783 kernel: veth43e5e1f: entered allmulticast mode Jun 12 23:04:49.529959 kernel: veth43e5e1f: entered promiscuous mode Jun 12 23:04:49.515000 audit: ANOM_PROMISCUOUS dev=veth43e5e1f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:49.515000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52e1e0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.515000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:49.530609 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:49.531000 audit[12525]: NETFILTER_CFG table=raw:247 family=2 entries=1 op=nft_register_rule pid=12525 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:49.531000 audit[12525]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe82af800 a2=0 a3=0 items=0 ppid=2935 pid=12525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:49.531000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:49.533041 systemd-networkd[2176]: veth43e5e1f: Link UP Jun 12 23:04:49.552789 kernel: eth0: renamed from veth81de293 Jun 12 23:04:49.552876 kernel: docker0: port 1(veth43e5e1f) entered blocking state Jun 12 23:04:49.552894 kernel: docker0: port 1(veth43e5e1f) entered forwarding state Jun 12 23:04:49.553943 systemd-networkd[2176]: veth43e5e1f: Gained carrier Jun 12 23:04:49.554246 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:50.583852 systemd[1]: docker-d638e073427ffb348b89912fdd184faab961c3592089a0cd859588aab3e7beda.scope: Deactivated successfully. Jun 12 23:04:50.597643 dockerd[2935]: time="2026-06-12T23:04:50.597554127Z" level=info msg="ignoring event" container=d638e073427ffb348b89912fdd184faab961c3592089a0cd859588aab3e7beda module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:50.597955 containerd[2455]: time="2026-06-12T23:04:50.597583924Z" level=info msg="shim disconnected" id=d638e073427ffb348b89912fdd184faab961c3592089a0cd859588aab3e7beda namespace=moby Jun 12 23:04:50.597955 containerd[2455]: time="2026-06-12T23:04:50.597614609Z" level=info msg="cleaning up after shim disconnected" id=d638e073427ffb348b89912fdd184faab961c3592089a0cd859588aab3e7beda namespace=moby Jun 12 23:04:50.597955 containerd[2455]: time="2026-06-12T23:04:50.597620089Z" level=info msg="cleaning up dead shim" id=d638e073427ffb348b89912fdd184faab961c3592089a0cd859588aab3e7beda namespace=moby Jun 12 23:04:50.618848 kernel: docker0: port 1(veth43e5e1f) entered disabled state Jun 12 23:04:50.621534 kernel: veth81de293: renamed from eth0 Jun 12 23:04:50.619848 systemd-networkd[2176]: veth43e5e1f: Lost carrier Jun 12 23:04:50.636000 audit[12556]: NETFILTER_CFG table=raw:248 family=2 entries=1 op=nft_unregister_rule pid=12556 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:50.636000 audit[12556]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffa9d8bf0 a2=0 a3=0 items=0 ppid=2935 pid=12556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.636000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:50.648213 systemd-networkd[2176]: veth43e5e1f: Link DOWN Jun 12 23:04:50.655561 kernel: docker0: port 1(veth43e5e1f) entered disabled state Jun 12 23:04:50.655626 kernel: veth43e5e1f (unregistering): left allmulticast mode Jun 12 23:04:50.655827 kernel: veth43e5e1f (unregistering): left promiscuous mode Jun 12 23:04:50.647000 audit: ANOM_PROMISCUOUS dev=veth43e5e1f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:50.664295 kernel: docker0: port 1(veth43e5e1f) entered disabled state Jun 12 23:04:50.647000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe3a0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.647000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:50.675799 systemd[1]: run-docker-netns-5269e4a6503c.mount: Deactivated successfully. Jun 12 23:04:50.679280 systemd[1]: var-lib-docker-overlay2-70e54a7b8c581a651d2313688d62193b7397e8644ef9630868f81e9590be5f1b-merged.mount: Deactivated successfully. Jun 12 23:04:50.685000 audit: BPF prog-id=569 op=UNLOAD Jun 12 23:04:50.685000 audit: BPF prog-id=573 op=UNLOAD Jun 12 23:04:50.806135 systemd[1]: var-lib-docker-overlay2-d692fc4282ab0ae3e6e15dc787ecaf62c72dc58810c6eb6f9f3851bb034f40d8\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:50.871244 containerd[2455]: time="2026-06-12T23:04:50.871140469Z" level=info msg="connecting to shim 0a6e66a120b1bafc2eed6de3f961d16236931975aff80a182647265c31357f97" address="unix:///run/containerd/s/dad949179d13c6cbc9ed6b543e79c8e0b5bddc6c7df2de1717359f0c1cf8a630" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:50.889177 systemd[1]: Started docker-0a6e66a120b1bafc2eed6de3f961d16236931975aff80a182647265c31357f97.scope - libcontainer container 0a6e66a120b1bafc2eed6de3f961d16236931975aff80a182647265c31357f97. Jun 12 23:04:50.896000 audit: BPF prog-id=574 op=LOAD Jun 12 23:04:50.897000 audit: BPF prog-id=575 op=LOAD Jun 12 23:04:50.897000 audit[12584]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3f107dcb7f80 a2=98 a3=0 items=0 ppid=12573 pid=12584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30613665363661313230623162616663326565643664653366 Jun 12 23:04:50.897000 audit: BPF prog-id=575 op=UNLOAD Jun 12 23:04:50.897000 audit[12584]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12573 pid=12584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30613665363661313230623162616663326565643664653366 Jun 12 23:04:50.897000 audit: BPF prog-id=576 op=LOAD Jun 12 23:04:50.897000 audit[12584]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3f107dcb8258 a2=98 a3=0 items=0 ppid=12573 pid=12584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30613665363661313230623162616663326565643664653366 Jun 12 23:04:50.897000 audit: BPF prog-id=577 op=LOAD Jun 12 23:04:50.897000 audit[12584]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3f107dcb7f98 a2=98 a3=0 items=0 ppid=12573 pid=12584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30613665363661313230623162616663326565643664653366 Jun 12 23:04:50.897000 audit: BPF prog-id=577 op=UNLOAD Jun 12 23:04:50.897000 audit[12584]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12573 pid=12584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30613665363661313230623162616663326565643664653366 Jun 12 23:04:50.897000 audit: BPF prog-id=576 op=UNLOAD Jun 12 23:04:50.897000 audit[12584]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12573 pid=12584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30613665363661313230623162616663326565643664653366 Jun 12 23:04:50.897000 audit: BPF prog-id=578 op=LOAD Jun 12 23:04:50.897000 audit[12584]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3f107dcb84a8 a2=98 a3=0 items=0 ppid=12573 pid=12584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F30613665363661313230623162616663326565643664653366 Jun 12 23:04:50.920177 kernel: docker0: port 1(veth34fad3f) entered blocking state Jun 12 23:04:50.920252 kernel: docker0: port 1(veth34fad3f) entered disabled state Jun 12 23:04:50.923053 kernel: veth34fad3f: entered allmulticast mode Jun 12 23:04:50.925848 kernel: veth34fad3f: entered promiscuous mode Jun 12 23:04:50.912000 audit: ANOM_PROMISCUOUS dev=veth34fad3f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:50.912000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52eb40 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.912000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:50.927000 audit[12606]: NETFILTER_CFG table=raw:249 family=2 entries=1 op=nft_register_rule pid=12606 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:50.927000 audit[12606]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd54b85d0 a2=0 a3=0 items=0 ppid=2935 pid=12606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:50.927000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:50.927903 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:50.928830 systemd-networkd[2176]: veth34fad3f: Link UP Jun 12 23:04:50.942791 kernel: eth0: renamed from vethf2a95ad Jun 12 23:04:50.942859 kernel: docker0: port 1(veth34fad3f) entered blocking state Jun 12 23:04:50.949959 kernel: docker0: port 1(veth34fad3f) entered forwarding state Jun 12 23:04:50.950295 systemd-networkd[2176]: veth34fad3f: Gained carrier Jun 12 23:04:50.950876 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:51.976417 systemd[1]: docker-0a6e66a120b1bafc2eed6de3f961d16236931975aff80a182647265c31357f97.scope: Deactivated successfully. Jun 12 23:04:51.989275 dockerd[2935]: time="2026-06-12T23:04:51.989217044Z" level=info msg="ignoring event" container=0a6e66a120b1bafc2eed6de3f961d16236931975aff80a182647265c31357f97 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:51.990120 containerd[2455]: time="2026-06-12T23:04:51.990040282Z" level=info msg="shim disconnected" id=0a6e66a120b1bafc2eed6de3f961d16236931975aff80a182647265c31357f97 namespace=moby Jun 12 23:04:51.990120 containerd[2455]: time="2026-06-12T23:04:51.990073359Z" level=info msg="cleaning up after shim disconnected" id=0a6e66a120b1bafc2eed6de3f961d16236931975aff80a182647265c31357f97 namespace=moby Jun 12 23:04:51.990120 containerd[2455]: time="2026-06-12T23:04:51.990078886Z" level=info msg="cleaning up dead shim" id=0a6e66a120b1bafc2eed6de3f961d16236931975aff80a182647265c31357f97 namespace=moby Jun 12 23:04:52.011042 systemd-networkd[2176]: veth34fad3f: Lost carrier Jun 12 23:04:52.011800 kernel: docker0: port 1(veth34fad3f) entered disabled state Jun 12 23:04:52.011844 kernel: vethf2a95ad: renamed from eth0 Jun 12 23:04:52.028000 audit[12638]: NETFILTER_CFG table=raw:250 family=2 entries=1 op=nft_unregister_rule pid=12638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:52.028000 audit[12638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffffbba5290 a2=0 a3=0 items=0 ppid=2935 pid=12638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.028000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:52.036154 systemd-networkd[2176]: veth34fad3f: Link DOWN Jun 12 23:04:52.043505 kernel: docker0: port 1(veth34fad3f) entered disabled state Jun 12 23:04:52.043565 kernel: veth34fad3f (unregistering): left allmulticast mode Jun 12 23:04:52.047064 kernel: veth34fad3f (unregistering): left promiscuous mode Jun 12 23:04:52.035000 audit: ANOM_PROMISCUOUS dev=veth34fad3f prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:52.050900 kernel: docker0: port 1(veth34fad3f) entered disabled state Jun 12 23:04:52.035000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fea60 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.035000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:52.062169 systemd[1]: run-docker-netns-1a4bfab912c1.mount: Deactivated successfully. Jun 12 23:04:52.065757 systemd[1]: var-lib-docker-overlay2-d692fc4282ab0ae3e6e15dc787ecaf62c72dc58810c6eb6f9f3851bb034f40d8-merged.mount: Deactivated successfully. Jun 12 23:04:52.072000 audit: BPF prog-id=574 op=UNLOAD Jun 12 23:04:52.072000 audit: BPF prog-id=578 op=UNLOAD Jun 12 23:04:52.134192 systemd[1]: var-lib-docker-overlay2-5b6b124e0e937e71a15bf4a31b3f616a73155533a772debd260d68244799ce5d\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:52.204804 containerd[2455]: time="2026-06-12T23:04:52.204737059Z" level=info msg="connecting to shim 4e247ab8e14c9ac07b43a388ea3bc7d4e41c8f240abe61c1742926af179db52c" address="unix:///run/containerd/s/9a40e970d8d3e2a45b7182fee9f93868af3ec8045736a19becd786b97f98ccb3" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:52.222939 systemd[1]: Started docker-4e247ab8e14c9ac07b43a388ea3bc7d4e41c8f240abe61c1742926af179db52c.scope - libcontainer container 4e247ab8e14c9ac07b43a388ea3bc7d4e41c8f240abe61c1742926af179db52c. Jun 12 23:04:52.230000 audit: BPF prog-id=579 op=LOAD Jun 12 23:04:52.231000 audit: BPF prog-id=580 op=LOAD Jun 12 23:04:52.231000 audit[12666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=785d9ee37f80 a2=98 a3=0 items=0 ppid=12655 pid=12666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653234376162386531346339616330376234336133383865 Jun 12 23:04:52.231000 audit: BPF prog-id=580 op=UNLOAD Jun 12 23:04:52.231000 audit[12666]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12655 pid=12666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653234376162386531346339616330376234336133383865 Jun 12 23:04:52.231000 audit: BPF prog-id=581 op=LOAD Jun 12 23:04:52.231000 audit[12666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=785d9ee38258 a2=98 a3=0 items=0 ppid=12655 pid=12666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653234376162386531346339616330376234336133383865 Jun 12 23:04:52.231000 audit: BPF prog-id=582 op=LOAD Jun 12 23:04:52.231000 audit[12666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=785d9ee37f98 a2=98 a3=0 items=0 ppid=12655 pid=12666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653234376162386531346339616330376234336133383865 Jun 12 23:04:52.231000 audit: BPF prog-id=582 op=UNLOAD Jun 12 23:04:52.231000 audit[12666]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=12655 pid=12666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653234376162386531346339616330376234336133383865 Jun 12 23:04:52.231000 audit: BPF prog-id=581 op=UNLOAD Jun 12 23:04:52.231000 audit[12666]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12655 pid=12666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653234376162386531346339616330376234336133383865 Jun 12 23:04:52.231000 audit: BPF prog-id=583 op=LOAD Jun 12 23:04:52.231000 audit[12666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=785d9ee384a8 a2=98 a3=0 items=0 ppid=12655 pid=12666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34653234376162386531346339616330376234336133383865 Jun 12 23:04:52.251677 kernel: docker0: port 1(vetha630304) entered blocking state Jun 12 23:04:52.251759 kernel: docker0: port 1(vetha630304) entered disabled state Jun 12 23:04:52.254430 kernel: vetha630304: entered allmulticast mode Jun 12 23:04:52.257537 kernel: vetha630304: entered promiscuous mode Jun 12 23:04:52.244000 audit: ANOM_PROMISCUOUS dev=vetha630304 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:52.244000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beaa3c0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.244000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:52.258335 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:52.259000 audit[12690]: NETFILTER_CFG table=raw:251 family=2 entries=1 op=nft_register_rule pid=12690 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:52.259000 audit[12690]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd1829470 a2=0 a3=0 items=0 ppid=2935 pid=12690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:52.259000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:52.261052 systemd-networkd[2176]: vetha630304: Link UP Jun 12 23:04:52.274801 kernel: eth0: renamed from vethc310909 Jun 12 23:04:52.282024 kernel: docker0: port 1(vetha630304) entered blocking state Jun 12 23:04:52.282099 kernel: docker0: port 1(vetha630304) entered forwarding state Jun 12 23:04:52.282289 systemd-networkd[2176]: vetha630304: Gained carrier Jun 12 23:04:52.283065 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:53.306185 systemd[1]: docker-4e247ab8e14c9ac07b43a388ea3bc7d4e41c8f240abe61c1742926af179db52c.scope: Deactivated successfully. Jun 12 23:04:53.318468 dockerd[2935]: time="2026-06-12T23:04:53.318416748Z" level=info msg="ignoring event" container=4e247ab8e14c9ac07b43a388ea3bc7d4e41c8f240abe61c1742926af179db52c module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:53.319311 containerd[2455]: time="2026-06-12T23:04:53.319143011Z" level=info msg="shim disconnected" id=4e247ab8e14c9ac07b43a388ea3bc7d4e41c8f240abe61c1742926af179db52c namespace=moby Jun 12 23:04:53.319311 containerd[2455]: time="2026-06-12T23:04:53.319168592Z" level=info msg="cleaning up after shim disconnected" id=4e247ab8e14c9ac07b43a388ea3bc7d4e41c8f240abe61c1742926af179db52c namespace=moby Jun 12 23:04:53.319311 containerd[2455]: time="2026-06-12T23:04:53.319174384Z" level=info msg="cleaning up dead shim" id=4e247ab8e14c9ac07b43a388ea3bc7d4e41c8f240abe61c1742926af179db52c namespace=moby Jun 12 23:04:53.342193 systemd-networkd[2176]: vetha630304: Lost carrier Jun 12 23:04:53.342804 kernel: docker0: port 1(vetha630304) entered disabled state Jun 12 23:04:53.342848 kernel: vethc310909: renamed from eth0 Jun 12 23:04:53.358000 audit[12721]: NETFILTER_CFG table=raw:252 family=2 entries=1 op=nft_unregister_rule pid=12721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:53.363373 kernel: kauditd_printk_skb: 134 callbacks suppressed Jun 12 23:04:53.363421 kernel: audit: type=1325 audit(1781305493.358:2187): table=raw:252 family=2 entries=1 op=nft_unregister_rule pid=12721 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:53.358000 audit[12721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc5672c00 a2=0 a3=0 items=0 ppid=2935 pid=12721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.387850 kernel: audit: type=1300 audit(1781305493.358:2187): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc5672c00 a2=0 a3=0 items=0 ppid=2935 pid=12721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.358000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:53.398917 kernel: audit: type=1327 audit(1781305493.358:2187): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:53.401400 systemd-networkd[2176]: vetha630304: Link DOWN Jun 12 23:04:53.404794 kernel: docker0: port 1(vetha630304) entered disabled state Jun 12 23:04:53.405314 kernel: vetha630304 (unregistering): left allmulticast mode Jun 12 23:04:53.411716 kernel: vetha630304 (unregistering): left promiscuous mode Jun 12 23:04:53.415140 kernel: docker0: port 1(vetha630304) entered disabled state Jun 12 23:04:53.399000 audit: ANOM_PROMISCUOUS dev=vetha630304 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:53.422125 kernel: audit: type=1700 audit(1781305493.399:2188): dev=vetha630304 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:53.399000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ffc60 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.442774 systemd[1]: run-docker-netns-3ada17a413ff.mount: Deactivated successfully. Jun 12 23:04:53.399000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:53.453020 systemd[1]: var-lib-docker-overlay2-5b6b124e0e937e71a15bf4a31b3f616a73155533a772debd260d68244799ce5d-merged.mount: Deactivated successfully. Jun 12 23:04:53.462856 kernel: audit: type=1300 audit(1781305493.399:2188): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9ffc60 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.462920 kernel: audit: type=1327 audit(1781305493.399:2188): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:53.475000 audit: BPF prog-id=579 op=UNLOAD Jun 12 23:04:53.475000 audit: BPF prog-id=583 op=UNLOAD Jun 12 23:04:53.489105 kernel: audit: type=1334 audit(1781305493.475:2189): prog-id=579 op=UNLOAD Jun 12 23:04:53.489140 kernel: audit: type=1334 audit(1781305493.475:2190): prog-id=583 op=UNLOAD Jun 12 23:04:53.559699 systemd[1]: var-lib-docker-overlay2-f1e7d7c88facab4f11d2d922465631c24426c3b3f487ede8f11f9ccb7fafedba\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:53.631643 containerd[2455]: time="2026-06-12T23:04:53.631481864Z" level=info msg="connecting to shim 55ca3acec129756107dcad12b668497ff9a1d3c303da86e7635223fe8aa66f45" address="unix:///run/containerd/s/f5fde2424bf4ed8f2ca6fc0346e8c0efedf0493783beccc911d0da3106ac9fc5" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:53.649928 systemd[1]: Started docker-55ca3acec129756107dcad12b668497ff9a1d3c303da86e7635223fe8aa66f45.scope - libcontainer container 55ca3acec129756107dcad12b668497ff9a1d3c303da86e7635223fe8aa66f45. Jun 12 23:04:53.656000 audit: BPF prog-id=584 op=LOAD Jun 12 23:04:53.661000 audit: BPF prog-id=585 op=LOAD Jun 12 23:04:53.667069 kernel: audit: type=1334 audit(1781305493.656:2191): prog-id=584 op=LOAD Jun 12 23:04:53.667128 kernel: audit: type=1334 audit(1781305493.661:2192): prog-id=585 op=LOAD Jun 12 23:04:53.661000 audit[12750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=411a6381ff80 a2=98 a3=0 items=0 ppid=12739 pid=12750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356361336163656331323937353631303764636164313262 Jun 12 23:04:53.661000 audit: BPF prog-id=585 op=UNLOAD Jun 12 23:04:53.661000 audit[12750]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12739 pid=12750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356361336163656331323937353631303764636164313262 Jun 12 23:04:53.661000 audit: BPF prog-id=586 op=LOAD Jun 12 23:04:53.661000 audit[12750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=411a63820258 a2=98 a3=0 items=0 ppid=12739 pid=12750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356361336163656331323937353631303764636164313262 Jun 12 23:04:53.661000 audit: BPF prog-id=587 op=LOAD Jun 12 23:04:53.661000 audit[12750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=411a6381ff98 a2=98 a3=0 items=0 ppid=12739 pid=12750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356361336163656331323937353631303764636164313262 Jun 12 23:04:53.661000 audit: BPF prog-id=587 op=UNLOAD Jun 12 23:04:53.661000 audit[12750]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12739 pid=12750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356361336163656331323937353631303764636164313262 Jun 12 23:04:53.661000 audit: BPF prog-id=586 op=UNLOAD Jun 12 23:04:53.661000 audit[12750]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12739 pid=12750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356361336163656331323937353631303764636164313262 Jun 12 23:04:53.661000 audit: BPF prog-id=588 op=LOAD Jun 12 23:04:53.661000 audit[12750]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=411a638204a8 a2=98 a3=0 items=0 ppid=12739 pid=12750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F35356361336163656331323937353631303764636164313262 Jun 12 23:04:53.678365 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:53.685113 kernel: docker0: port 1(veth2fe4bc3) entered blocking state Jun 12 23:04:53.685173 kernel: docker0: port 1(veth2fe4bc3) entered disabled state Jun 12 23:04:53.688092 kernel: veth2fe4bc3: entered allmulticast mode Jun 12 23:04:53.690933 kernel: veth2fe4bc3: entered promiscuous mode Jun 12 23:04:53.676000 audit: ANOM_PROMISCUOUS dev=veth2fe4bc3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:53.676000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beabb30 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.676000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:53.692000 audit[12772]: NETFILTER_CFG table=raw:253 family=2 entries=1 op=nft_register_rule pid=12772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:53.692000 audit[12772]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffe9d9e220 a2=0 a3=0 items=0 ppid=2935 pid=12772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:53.692000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:53.695036 systemd-networkd[2176]: veth2fe4bc3: Link UP Jun 12 23:04:53.716178 kernel: eth0: renamed from vethe3ed3fa Jun 12 23:04:53.716255 kernel: docker0: port 1(veth2fe4bc3) entered blocking state Jun 12 23:04:53.719891 kernel: docker0: port 1(veth2fe4bc3) entered forwarding state Jun 12 23:04:53.720292 systemd-networkd[2176]: veth2fe4bc3: Gained carrier Jun 12 23:04:53.720942 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:54.745925 systemd[1]: docker-55ca3acec129756107dcad12b668497ff9a1d3c303da86e7635223fe8aa66f45.scope: Deactivated successfully. Jun 12 23:04:54.757070 dockerd[2935]: time="2026-06-12T23:04:54.756955600Z" level=info msg="ignoring event" container=55ca3acec129756107dcad12b668497ff9a1d3c303da86e7635223fe8aa66f45 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:54.757960 containerd[2455]: time="2026-06-12T23:04:54.757349124Z" level=info msg="shim disconnected" id=55ca3acec129756107dcad12b668497ff9a1d3c303da86e7635223fe8aa66f45 namespace=moby Jun 12 23:04:54.757960 containerd[2455]: time="2026-06-12T23:04:54.757376170Z" level=info msg="cleaning up after shim disconnected" id=55ca3acec129756107dcad12b668497ff9a1d3c303da86e7635223fe8aa66f45 namespace=moby Jun 12 23:04:54.757960 containerd[2455]: time="2026-06-12T23:04:54.757501895Z" level=info msg="cleaning up dead shim" id=55ca3acec129756107dcad12b668497ff9a1d3c303da86e7635223fe8aa66f45 namespace=moby Jun 12 23:04:54.780979 systemd-networkd[2176]: veth2fe4bc3: Lost carrier Jun 12 23:04:54.781802 kernel: docker0: port 1(veth2fe4bc3) entered disabled state Jun 12 23:04:54.781836 kernel: vethe3ed3fa: renamed from eth0 Jun 12 23:04:54.801000 audit[12802]: NETFILTER_CFG table=raw:254 family=2 entries=1 op=nft_unregister_rule pid=12802 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:54.801000 audit[12802]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc4f94090 a2=0 a3=0 items=0 ppid=2935 pid=12802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:54.801000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:54.812339 systemd-networkd[2176]: veth2fe4bc3: Link DOWN Jun 12 23:04:54.816791 kernel: docker0: port 1(veth2fe4bc3) entered disabled state Jun 12 23:04:54.826002 kernel: veth2fe4bc3 (unregistering): left allmulticast mode Jun 12 23:04:54.826076 kernel: veth2fe4bc3 (unregistering): left promiscuous mode Jun 12 23:04:54.810000 audit: ANOM_PROMISCUOUS dev=veth2fe4bc3 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:54.829557 kernel: docker0: port 1(veth2fe4bc3) entered disabled state Jun 12 23:04:54.810000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6880 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:54.810000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:54.841432 systemd[1]: run-docker-netns-41c8d97dcf1b.mount: Deactivated successfully. Jun 12 23:04:54.843905 systemd[1]: var-lib-docker-overlay2-f1e7d7c88facab4f11d2d922465631c24426c3b3f487ede8f11f9ccb7fafedba-merged.mount: Deactivated successfully. Jun 12 23:04:54.852000 audit: BPF prog-id=584 op=UNLOAD Jun 12 23:04:54.852000 audit: BPF prog-id=588 op=UNLOAD Jun 12 23:04:55.017872 containerd[2455]: time="2026-06-12T23:04:55.017224649Z" level=info msg="connecting to shim d563788b756b3017dfefbcc6d7d5cc31b3ee34c867e1ed341c510df14f4e0269" address="unix:///run/containerd/s/645f76d0a162b42c6ac31733a1e23eb470f7b8bfc5a2c44f1406d3f045e97ceb" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:55.033939 systemd[1]: Started docker-d563788b756b3017dfefbcc6d7d5cc31b3ee34c867e1ed341c510df14f4e0269.scope - libcontainer container d563788b756b3017dfefbcc6d7d5cc31b3ee34c867e1ed341c510df14f4e0269. Jun 12 23:04:55.039000 audit: BPF prog-id=589 op=LOAD Jun 12 23:04:55.040000 audit: BPF prog-id=590 op=LOAD Jun 12 23:04:55.040000 audit[12829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7a77e6e0df80 a2=98 a3=0 items=0 ppid=12818 pid=12829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:55.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353633373838623735366233303137646665666263633664 Jun 12 23:04:55.040000 audit: BPF prog-id=590 op=UNLOAD Jun 12 23:04:55.040000 audit[12829]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12818 pid=12829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:55.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353633373838623735366233303137646665666263633664 Jun 12 23:04:55.040000 audit: BPF prog-id=591 op=LOAD Jun 12 23:04:55.040000 audit[12829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7a77e6e0e258 a2=98 a3=0 items=0 ppid=12818 pid=12829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:55.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353633373838623735366233303137646665666263633664 Jun 12 23:04:55.040000 audit: BPF prog-id=592 op=LOAD Jun 12 23:04:55.040000 audit[12829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=7a77e6e0df98 a2=98 a3=0 items=0 ppid=12818 pid=12829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:55.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353633373838623735366233303137646665666263633664 Jun 12 23:04:55.040000 audit: BPF prog-id=592 op=UNLOAD Jun 12 23:04:55.040000 audit[12829]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=12818 pid=12829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:55.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353633373838623735366233303137646665666263633664 Jun 12 23:04:55.040000 audit: BPF prog-id=591 op=UNLOAD Jun 12 23:04:55.040000 audit[12829]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12818 pid=12829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:55.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353633373838623735366233303137646665666263633664 Jun 12 23:04:55.040000 audit: BPF prog-id=593 op=LOAD Jun 12 23:04:55.040000 audit[12829]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7a77e6e0e4a8 a2=98 a3=0 items=0 ppid=12818 pid=12829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:55.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F64353633373838623735366233303137646665666263633664 Jun 12 23:04:55.053646 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:55.065252 kernel: docker0: port 1(vethb4a4002) entered blocking state Jun 12 23:04:55.065331 kernel: docker0: port 1(vethb4a4002) entered disabled state Jun 12 23:04:55.065349 kernel: vethb4a4002: entered allmulticast mode Jun 12 23:04:55.070853 kernel: vethb4a4002: entered promiscuous mode Jun 12 23:04:55.052000 audit: ANOM_PROMISCUOUS dev=vethb4a4002 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:55.052000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b483bc0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:55.052000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:55.071000 audit[12850]: NETFILTER_CFG table=raw:255 family=2 entries=1 op=nft_register_rule pid=12850 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:55.071000 audit[12850]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd8450530 a2=0 a3=0 items=0 ppid=2935 pid=12850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:55.071000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:55.073539 systemd-networkd[2176]: vethb4a4002: Link UP Jun 12 23:04:55.090913 kernel: eth0: renamed from veth92af5ce Jun 12 23:04:55.090986 kernel: docker0: port 1(vethb4a4002) entered blocking state Jun 12 23:04:55.091003 kernel: docker0: port 1(vethb4a4002) entered forwarding state Jun 12 23:04:55.094637 systemd-networkd[2176]: vethb4a4002: Gained carrier Jun 12 23:04:55.095055 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:56.120378 systemd[1]: docker-d563788b756b3017dfefbcc6d7d5cc31b3ee34c867e1ed341c510df14f4e0269.scope: Deactivated successfully. Jun 12 23:04:56.132771 dockerd[2935]: time="2026-06-12T23:04:56.132642270Z" level=info msg="ignoring event" container=d563788b756b3017dfefbcc6d7d5cc31b3ee34c867e1ed341c510df14f4e0269 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:56.133379 containerd[2455]: time="2026-06-12T23:04:56.133234129Z" level=info msg="shim disconnected" id=d563788b756b3017dfefbcc6d7d5cc31b3ee34c867e1ed341c510df14f4e0269 namespace=moby Jun 12 23:04:56.133379 containerd[2455]: time="2026-06-12T23:04:56.133264230Z" level=info msg="cleaning up after shim disconnected" id=d563788b756b3017dfefbcc6d7d5cc31b3ee34c867e1ed341c510df14f4e0269 namespace=moby Jun 12 23:04:56.133379 containerd[2455]: time="2026-06-12T23:04:56.133271038Z" level=info msg="cleaning up dead shim" id=d563788b756b3017dfefbcc6d7d5cc31b3ee34c867e1ed341c510df14f4e0269 namespace=moby Jun 12 23:04:56.154467 systemd-networkd[2176]: vethb4a4002: Lost carrier Jun 12 23:04:56.155050 kernel: docker0: port 1(vethb4a4002) entered disabled state Jun 12 23:04:56.155102 kernel: veth92af5ce: renamed from eth0 Jun 12 23:04:56.175000 audit[12881]: NETFILTER_CFG table=raw:256 family=2 entries=1 op=nft_unregister_rule pid=12881 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:56.175000 audit[12881]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff7817730 a2=0 a3=0 items=0 ppid=2935 pid=12881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.175000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:56.186226 systemd-networkd[2176]: vethb4a4002: Link DOWN Jun 12 23:04:56.189794 kernel: docker0: port 1(vethb4a4002) entered disabled state Jun 12 23:04:56.197016 kernel: vethb4a4002 (unregistering): left allmulticast mode Jun 12 23:04:56.197072 kernel: vethb4a4002 (unregistering): left promiscuous mode Jun 12 23:04:56.185000 audit: ANOM_PROMISCUOUS dev=vethb4a4002 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:56.200585 kernel: docker0: port 1(vethb4a4002) entered disabled state Jun 12 23:04:56.185000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f7d00 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.185000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:56.211756 systemd[1]: run-docker-netns-b24f3abde7c2.mount: Deactivated successfully. Jun 12 23:04:56.216685 systemd[1]: var-lib-docker-overlay2-c4b2805609b4b53850d62a0de2230687c7fc75e71e47e5dc4db268e87a3226f1-merged.mount: Deactivated successfully. Jun 12 23:04:56.229000 audit: BPF prog-id=589 op=UNLOAD Jun 12 23:04:56.229000 audit: BPF prog-id=593 op=UNLOAD Jun 12 23:04:56.298137 systemd[1]: var-lib-docker-overlay2-8f8b0b44b30ff2c1b0c71a3b4e5ea459aae34a2337fdce88553230ce8ccc8b68\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:56.375114 containerd[2455]: time="2026-06-12T23:04:56.374725819Z" level=info msg="connecting to shim 2448d66f982c0acf717c333dcebcb62a0ccdf01615c394eb264a7d943f94293c" address="unix:///run/containerd/s/c52655a205b8c6863ea961201fbf3392ce730fcae09a0bd6184c0eb2409997c8" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:56.392914 systemd[1]: Started docker-2448d66f982c0acf717c333dcebcb62a0ccdf01615c394eb264a7d943f94293c.scope - libcontainer container 2448d66f982c0acf717c333dcebcb62a0ccdf01615c394eb264a7d943f94293c. Jun 12 23:04:56.400000 audit: BPF prog-id=594 op=LOAD Jun 12 23:04:56.400000 audit: BPF prog-id=595 op=LOAD Jun 12 23:04:56.400000 audit[12910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=798e75f37f80 a2=98 a3=0 items=0 ppid=12899 pid=12910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343438643636663938326330616366373137633333336463 Jun 12 23:04:56.401000 audit: BPF prog-id=595 op=UNLOAD Jun 12 23:04:56.401000 audit[12910]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12899 pid=12910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343438643636663938326330616366373137633333336463 Jun 12 23:04:56.401000 audit: BPF prog-id=596 op=LOAD Jun 12 23:04:56.401000 audit[12910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=798e75f38258 a2=98 a3=0 items=0 ppid=12899 pid=12910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343438643636663938326330616366373137633333336463 Jun 12 23:04:56.401000 audit: BPF prog-id=597 op=LOAD Jun 12 23:04:56.401000 audit[12910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=798e75f37f98 a2=98 a3=0 items=0 ppid=12899 pid=12910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343438643636663938326330616366373137633333336463 Jun 12 23:04:56.401000 audit: BPF prog-id=597 op=UNLOAD Jun 12 23:04:56.401000 audit[12910]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=12899 pid=12910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343438643636663938326330616366373137633333336463 Jun 12 23:04:56.401000 audit: BPF prog-id=596 op=UNLOAD Jun 12 23:04:56.401000 audit[12910]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=12899 pid=12910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343438643636663938326330616366373137633333336463 Jun 12 23:04:56.401000 audit: BPF prog-id=598 op=LOAD Jun 12 23:04:56.401000 audit[12910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=798e75f384a8 a2=98 a3=0 items=0 ppid=12899 pid=12910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F32343438643636663938326330616366373137633333336463 Jun 12 23:04:56.413540 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:56.421625 kernel: docker0: port 1(veth5eebfcd) entered blocking state Jun 12 23:04:56.421692 kernel: docker0: port 1(veth5eebfcd) entered disabled state Jun 12 23:04:56.424931 kernel: veth5eebfcd: entered allmulticast mode Jun 12 23:04:56.428005 kernel: veth5eebfcd: entered promiscuous mode Jun 12 23:04:56.412000 audit: ANOM_PROMISCUOUS dev=veth5eebfcd prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:56.412000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b945110 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.412000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:56.429000 audit[12931]: NETFILTER_CFG table=raw:257 family=2 entries=1 op=nft_register_rule pid=12931 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:56.429000 audit[12931]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffcf088940 a2=0 a3=0 items=0 ppid=2935 pid=12931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:56.429000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:56.430517 systemd-networkd[2176]: veth5eebfcd: Link UP Jun 12 23:04:56.443793 kernel: eth0: renamed from veth0ea68b9 Jun 12 23:04:56.450845 kernel: docker0: port 1(veth5eebfcd) entered blocking state Jun 12 23:04:56.450893 kernel: docker0: port 1(veth5eebfcd) entered forwarding state Jun 12 23:04:56.451271 systemd-networkd[2176]: veth5eebfcd: Gained carrier Jun 12 23:04:56.451871 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:57.480478 systemd[1]: docker-2448d66f982c0acf717c333dcebcb62a0ccdf01615c394eb264a7d943f94293c.scope: Deactivated successfully. Jun 12 23:04:57.491022 dockerd[2935]: time="2026-06-12T23:04:57.490974679Z" level=info msg="ignoring event" container=2448d66f982c0acf717c333dcebcb62a0ccdf01615c394eb264a7d943f94293c module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:57.491459 containerd[2455]: time="2026-06-12T23:04:57.491279059Z" level=info msg="shim disconnected" id=2448d66f982c0acf717c333dcebcb62a0ccdf01615c394eb264a7d943f94293c namespace=moby Jun 12 23:04:57.491459 containerd[2455]: time="2026-06-12T23:04:57.491303745Z" level=info msg="cleaning up after shim disconnected" id=2448d66f982c0acf717c333dcebcb62a0ccdf01615c394eb264a7d943f94293c namespace=moby Jun 12 23:04:57.491459 containerd[2455]: time="2026-06-12T23:04:57.491309480Z" level=info msg="cleaning up dead shim" id=2448d66f982c0acf717c333dcebcb62a0ccdf01615c394eb264a7d943f94293c namespace=moby Jun 12 23:04:57.518219 systemd-networkd[2176]: veth5eebfcd: Lost carrier Jun 12 23:04:57.518940 kernel: docker0: port 1(veth5eebfcd) entered disabled state Jun 12 23:04:57.518983 kernel: veth0ea68b9: renamed from eth0 Jun 12 23:04:57.542000 audit[12960]: NETFILTER_CFG table=raw:258 family=2 entries=1 op=nft_unregister_rule pid=12960 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:57.542000 audit[12960]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffc23fcbe0 a2=0 a3=0 items=0 ppid=2935 pid=12960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.542000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:57.547147 systemd-networkd[2176]: veth5eebfcd: Link DOWN Jun 12 23:04:57.550795 kernel: docker0: port 1(veth5eebfcd) entered disabled state Jun 12 23:04:57.551060 kernel: veth5eebfcd (unregistering): left allmulticast mode Jun 12 23:04:57.557903 kernel: veth5eebfcd (unregistering): left promiscuous mode Jun 12 23:04:57.546000 audit: ANOM_PROMISCUOUS dev=veth5eebfcd prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:57.561797 kernel: docker0: port 1(veth5eebfcd) entered disabled state Jun 12 23:04:57.546000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bafa500 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.546000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:57.573936 systemd[1]: run-docker-netns-bf06f5079963.mount: Deactivated successfully. Jun 12 23:04:57.577350 systemd[1]: var-lib-docker-overlay2-8f8b0b44b30ff2c1b0c71a3b4e5ea459aae34a2337fdce88553230ce8ccc8b68-merged.mount: Deactivated successfully. Jun 12 23:04:57.584000 audit: BPF prog-id=594 op=UNLOAD Jun 12 23:04:57.584000 audit: BPF prog-id=598 op=UNLOAD Jun 12 23:04:57.668750 systemd[1]: var-lib-docker-overlay2-d6a431ef368ab9f7f9fb4fd456ff57c5c824b100354b7e34959e2df5a13616b2\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:57.729124 containerd[2455]: time="2026-06-12T23:04:57.729026453Z" level=info msg="connecting to shim 61d6cd72e4a3d92ce2135ef04c1954bd15c49027c6db4b666f21bccd74796485" address="unix:///run/containerd/s/39f835222747990f36af9d0d45a8008132d0f575cd94ed30624d4fa76475c922" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:57.745914 systemd[1]: Started docker-61d6cd72e4a3d92ce2135ef04c1954bd15c49027c6db4b666f21bccd74796485.scope - libcontainer container 61d6cd72e4a3d92ce2135ef04c1954bd15c49027c6db4b666f21bccd74796485. Jun 12 23:04:57.753000 audit: BPF prog-id=599 op=LOAD Jun 12 23:04:57.753000 audit: BPF prog-id=600 op=LOAD Jun 12 23:04:57.753000 audit[12988]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7d1cc1be1f80 a2=98 a3=0 items=0 ppid=12977 pid=12988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.753000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316436636437326534613364393263653231333565663034 Jun 12 23:04:57.753000 audit: BPF prog-id=600 op=UNLOAD Jun 12 23:04:57.753000 audit[12988]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12977 pid=12988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.753000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316436636437326534613364393263653231333565663034 Jun 12 23:04:57.754000 audit: BPF prog-id=601 op=LOAD Jun 12 23:04:57.754000 audit[12988]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7d1cc1be2258 a2=98 a3=0 items=0 ppid=12977 pid=12988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316436636437326534613364393263653231333565663034 Jun 12 23:04:57.754000 audit: BPF prog-id=602 op=LOAD Jun 12 23:04:57.754000 audit[12988]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7d1cc1be1f98 a2=98 a3=0 items=0 ppid=12977 pid=12988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316436636437326534613364393263653231333565663034 Jun 12 23:04:57.754000 audit: BPF prog-id=602 op=UNLOAD Jun 12 23:04:57.754000 audit[12988]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=12977 pid=12988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316436636437326534613364393263653231333565663034 Jun 12 23:04:57.754000 audit: BPF prog-id=601 op=UNLOAD Jun 12 23:04:57.754000 audit[12988]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=12977 pid=12988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316436636437326534613364393263653231333565663034 Jun 12 23:04:57.754000 audit: BPF prog-id=603 op=LOAD Jun 12 23:04:57.754000 audit[12988]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7d1cc1be24a8 a2=98 a3=0 items=0 ppid=12977 pid=12988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F36316436636437326534613364393263653231333565663034 Jun 12 23:04:57.771861 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:57.776640 kernel: docker0: port 1(veth4a99546) entered blocking state Jun 12 23:04:57.776710 kernel: docker0: port 1(veth4a99546) entered disabled state Jun 12 23:04:57.779579 kernel: veth4a99546: entered allmulticast mode Jun 12 23:04:57.782511 kernel: veth4a99546: entered promiscuous mode Jun 12 23:04:57.767000 audit: ANOM_PROMISCUOUS dev=veth4a99546 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:57.767000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c8f8a80 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.767000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:57.783000 audit[13010]: NETFILTER_CFG table=raw:259 family=2 entries=1 op=nft_register_rule pid=13010 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:57.783000 audit[13010]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffd42fa70 a2=0 a3=0 items=0 ppid=2935 pid=13010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:57.783000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:57.784880 systemd-networkd[2176]: veth4a99546: Link UP Jun 12 23:04:57.798800 kernel: eth0: renamed from vethb614b0a Jun 12 23:04:57.805657 kernel: docker0: port 1(veth4a99546) entered blocking state Jun 12 23:04:57.805712 kernel: docker0: port 1(veth4a99546) entered forwarding state Jun 12 23:04:57.806050 systemd-networkd[2176]: veth4a99546: Gained carrier Jun 12 23:04:57.806662 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:04:58.832980 systemd[1]: docker-61d6cd72e4a3d92ce2135ef04c1954bd15c49027c6db4b666f21bccd74796485.scope: Deactivated successfully. Jun 12 23:04:58.844443 dockerd[2935]: time="2026-06-12T23:04:58.844384930Z" level=info msg="ignoring event" container=61d6cd72e4a3d92ce2135ef04c1954bd15c49027c6db4b666f21bccd74796485 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:04:58.845132 containerd[2455]: time="2026-06-12T23:04:58.844594822Z" level=info msg="shim disconnected" id=61d6cd72e4a3d92ce2135ef04c1954bd15c49027c6db4b666f21bccd74796485 namespace=moby Jun 12 23:04:58.845132 containerd[2455]: time="2026-06-12T23:04:58.844618979Z" level=info msg="cleaning up after shim disconnected" id=61d6cd72e4a3d92ce2135ef04c1954bd15c49027c6db4b666f21bccd74796485 namespace=moby Jun 12 23:04:58.845132 containerd[2455]: time="2026-06-12T23:04:58.844625514Z" level=info msg="cleaning up dead shim" id=61d6cd72e4a3d92ce2135ef04c1954bd15c49027c6db4b666f21bccd74796485 namespace=moby Jun 12 23:04:58.865786 kernel: vethb614b0a: renamed from eth0 Jun 12 23:04:58.865872 kernel: docker0: port 1(veth4a99546) entered disabled state Jun 12 23:04:58.867916 systemd-networkd[2176]: veth4a99546: Lost carrier Jun 12 23:04:58.883000 audit[13041]: NETFILTER_CFG table=raw:260 family=2 entries=1 op=nft_unregister_rule pid=13041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:58.887246 kernel: kauditd_printk_skb: 134 callbacks suppressed Jun 12 23:04:58.887312 kernel: audit: type=1325 audit(1781305498.883:2243): table=raw:260 family=2 entries=1 op=nft_unregister_rule pid=13041 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:58.883000 audit[13041]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff22c51d0 a2=0 a3=0 items=0 ppid=2935 pid=13041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:58.914091 kernel: audit: type=1300 audit(1781305498.883:2243): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff22c51d0 a2=0 a3=0 items=0 ppid=2935 pid=13041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:58.883000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:58.925462 kernel: audit: type=1327 audit(1781305498.883:2243): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:58.927374 systemd-networkd[2176]: veth4a99546: Link DOWN Jun 12 23:04:58.931949 kernel: docker0: port 1(veth4a99546) entered disabled state Jun 12 23:04:58.932024 kernel: veth4a99546 (unregistering): left allmulticast mode Jun 12 23:04:58.938931 kernel: veth4a99546 (unregistering): left promiscuous mode Jun 12 23:04:58.926000 audit: ANOM_PROMISCUOUS dev=veth4a99546 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:58.944123 kernel: docker0: port 1(veth4a99546) entered disabled state Jun 12 23:04:58.944147 kernel: audit: type=1700 audit(1781305498.926:2244): dev=veth4a99546 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:58.926000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb30760 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:58.926000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:58.978361 systemd[1]: run-docker-netns-16ff2e66523a.mount: Deactivated successfully. Jun 12 23:04:58.981745 systemd[1]: var-lib-docker-overlay2-d6a431ef368ab9f7f9fb4fd456ff57c5c824b100354b7e34959e2df5a13616b2-merged.mount: Deactivated successfully. Jun 12 23:04:58.993206 kernel: audit: type=1300 audit(1781305498.926:2244): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760bb30760 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:58.993306 kernel: audit: type=1327 audit(1781305498.926:2244): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:59.006000 audit: BPF prog-id=599 op=UNLOAD Jun 12 23:04:59.006000 audit: BPF prog-id=603 op=UNLOAD Jun 12 23:04:59.030583 kernel: audit: type=1334 audit(1781305499.006:2245): prog-id=599 op=UNLOAD Jun 12 23:04:59.030621 kernel: audit: type=1334 audit(1781305499.006:2246): prog-id=603 op=UNLOAD Jun 12 23:04:59.092966 systemd[1]: var-lib-docker-overlay2-5e3e22ddc7ffcd680cfb8106f4070394c4036eeba699c83382c25702185d7122\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:04:59.164188 containerd[2455]: time="2026-06-12T23:04:59.164143400Z" level=info msg="connecting to shim 1ebaa93c66317ba5229061a716b0ba0f4c44408ae34a6c2d2bd2d4d601953388" address="unix:///run/containerd/s/33ecca139eea76e5f6f87c5ec569e53294b5b0ca71455e181658be9bb7283a23" namespace=moby protocol=ttrpc version=3 Jun 12 23:04:59.178934 systemd[1]: Started docker-1ebaa93c66317ba5229061a716b0ba0f4c44408ae34a6c2d2bd2d4d601953388.scope - libcontainer container 1ebaa93c66317ba5229061a716b0ba0f4c44408ae34a6c2d2bd2d4d601953388. Jun 12 23:04:59.186000 audit: BPF prog-id=604 op=LOAD Jun 12 23:04:59.190000 audit: BPF prog-id=605 op=LOAD Jun 12 23:04:59.195708 kernel: audit: type=1334 audit(1781305499.186:2247): prog-id=604 op=LOAD Jun 12 23:04:59.190000 audit[13069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1f282420df80 a2=98 a3=0 items=0 ppid=13057 pid=13069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:59.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656261613933633636333137626135323239303631613731 Jun 12 23:04:59.190000 audit: BPF prog-id=605 op=UNLOAD Jun 12 23:04:59.190000 audit[13069]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=13057 pid=13069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:59.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656261613933633636333137626135323239303631613731 Jun 12 23:04:59.196243 kernel: audit: type=1334 audit(1781305499.190:2248): prog-id=605 op=LOAD Jun 12 23:04:59.190000 audit: BPF prog-id=606 op=LOAD Jun 12 23:04:59.190000 audit[13069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1f282420e258 a2=98 a3=0 items=0 ppid=13057 pid=13069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:59.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656261613933633636333137626135323239303631613731 Jun 12 23:04:59.195000 audit: BPF prog-id=607 op=LOAD Jun 12 23:04:59.195000 audit[13069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=22 a0=5 a1=1f282420df98 a2=98 a3=0 items=0 ppid=13057 pid=13069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:59.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656261613933633636333137626135323239303631613731 Jun 12 23:04:59.195000 audit: BPF prog-id=607 op=UNLOAD Jun 12 23:04:59.195000 audit[13069]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=16 a1=0 a2=0 a3=0 items=0 ppid=13057 pid=13069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:59.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656261613933633636333137626135323239303631613731 Jun 12 23:04:59.195000 audit: BPF prog-id=606 op=UNLOAD Jun 12 23:04:59.195000 audit[13069]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=13057 pid=13069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:59.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656261613933633636333137626135323239303631613731 Jun 12 23:04:59.195000 audit: BPF prog-id=608 op=LOAD Jun 12 23:04:59.195000 audit[13069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=1f282420e4a8 a2=98 a3=0 items=0 ppid=13057 pid=13069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:59.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F31656261613933633636333137626135323239303631613731 Jun 12 23:04:59.209709 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:04:59.219383 kernel: docker0: port 1(veth5632116) entered blocking state Jun 12 23:04:59.219447 kernel: docker0: port 1(veth5632116) entered disabled state Jun 12 23:04:59.219474 kernel: veth5632116: entered allmulticast mode Jun 12 23:04:59.224625 kernel: veth5632116: entered promiscuous mode Jun 12 23:04:59.209000 audit: ANOM_PROMISCUOUS dev=veth5632116 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:04:59.209000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b945d70 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:59.209000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:04:59.227000 audit[13089]: NETFILTER_CFG table=raw:261 family=2 entries=1 op=nft_register_rule pid=13089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:04:59.227000 audit[13089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc6117720 a2=0 a3=0 items=0 ppid=2935 pid=13089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:04:59.227000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:04:59.228436 systemd-networkd[2176]: veth5632116: Link UP Jun 12 23:04:59.242796 kernel: eth0: renamed from veth833f3a4 Jun 12 23:04:59.249322 kernel: docker0: port 1(veth5632116) entered blocking state Jun 12 23:04:59.249396 kernel: docker0: port 1(veth5632116) entered forwarding state Jun 12 23:04:59.249656 systemd-networkd[2176]: veth5632116: Gained carrier Jun 12 23:04:59.250367 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:05:00.274860 systemd[1]: docker-1ebaa93c66317ba5229061a716b0ba0f4c44408ae34a6c2d2bd2d4d601953388.scope: Deactivated successfully. Jun 12 23:05:00.286360 dockerd[2935]: time="2026-06-12T23:05:00.286309400Z" level=info msg="ignoring event" container=1ebaa93c66317ba5229061a716b0ba0f4c44408ae34a6c2d2bd2d4d601953388 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:05:00.286933 containerd[2455]: time="2026-06-12T23:05:00.286726686Z" level=info msg="shim disconnected" id=1ebaa93c66317ba5229061a716b0ba0f4c44408ae34a6c2d2bd2d4d601953388 namespace=moby Jun 12 23:05:00.286933 containerd[2455]: time="2026-06-12T23:05:00.286754931Z" level=info msg="cleaning up after shim disconnected" id=1ebaa93c66317ba5229061a716b0ba0f4c44408ae34a6c2d2bd2d4d601953388 namespace=moby Jun 12 23:05:00.286933 containerd[2455]: time="2026-06-12T23:05:00.286760371Z" level=info msg="cleaning up dead shim" id=1ebaa93c66317ba5229061a716b0ba0f4c44408ae34a6c2d2bd2d4d601953388 namespace=moby Jun 12 23:05:00.311684 systemd-networkd[2176]: veth5632116: Lost carrier Jun 12 23:05:00.312167 kernel: docker0: port 1(veth5632116) entered disabled state Jun 12 23:05:00.315795 kernel: veth833f3a4: renamed from eth0 Jun 12 23:05:00.328000 audit[13120]: NETFILTER_CFG table=raw:262 family=2 entries=1 op=nft_unregister_rule pid=13120 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:00.328000 audit[13120]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff3b80f90 a2=0 a3=0 items=0 ppid=2935 pid=13120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.328000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:00.339177 systemd-networkd[2176]: veth5632116: Link DOWN Jun 12 23:05:00.347080 kernel: docker0: port 1(veth5632116) entered disabled state Jun 12 23:05:00.347137 kernel: veth5632116 (unregistering): left allmulticast mode Jun 12 23:05:00.351163 kernel: veth5632116 (unregistering): left promiscuous mode Jun 12 23:05:00.338000 audit: ANOM_PROMISCUOUS dev=veth5632116 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:00.354645 kernel: docker0: port 1(veth5632116) entered disabled state Jun 12 23:05:00.338000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b9fe6e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.338000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:00.366326 systemd[1]: run-docker-netns-9fcc73eae703.mount: Deactivated successfully. Jun 12 23:05:00.370316 systemd[1]: var-lib-docker-overlay2-5e3e22ddc7ffcd680cfb8106f4070394c4036eeba699c83382c25702185d7122-merged.mount: Deactivated successfully. Jun 12 23:05:00.380000 audit: BPF prog-id=604 op=UNLOAD Jun 12 23:05:00.380000 audit: BPF prog-id=608 op=UNLOAD Jun 12 23:05:00.467523 systemd[1]: var-lib-docker-overlay2-41dc571299d7b356a2b79cf55657c6efecbc027afe3b7eb16df4f4f491ed0dc4\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:05:00.536107 containerd[2455]: time="2026-06-12T23:05:00.535881769Z" level=info msg="connecting to shim 4f89df215a71d04f21fa9dddab03073d438c1b1db83ca98993895794e9fac3db" address="unix:///run/containerd/s/dff6e8365d4e678c0437cf8dd0c1329eea58237944988dacfffbee9663e76e11" namespace=moby protocol=ttrpc version=3 Jun 12 23:05:00.555931 systemd[1]: Started docker-4f89df215a71d04f21fa9dddab03073d438c1b1db83ca98993895794e9fac3db.scope - libcontainer container 4f89df215a71d04f21fa9dddab03073d438c1b1db83ca98993895794e9fac3db. Jun 12 23:05:00.563000 audit: BPF prog-id=609 op=LOAD Jun 12 23:05:00.564000 audit: BPF prog-id=610 op=LOAD Jun 12 23:05:00.564000 audit[13150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=787fbef8df80 a2=98 a3=0 items=0 ppid=13137 pid=13150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663839646632313561373164303466323166613964646461 Jun 12 23:05:00.564000 audit: BPF prog-id=610 op=UNLOAD Jun 12 23:05:00.564000 audit[13150]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13137 pid=13150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663839646632313561373164303466323166613964646461 Jun 12 23:05:00.564000 audit: BPF prog-id=611 op=LOAD Jun 12 23:05:00.564000 audit[13150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=787fbef8e258 a2=98 a3=0 items=0 ppid=13137 pid=13150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663839646632313561373164303466323166613964646461 Jun 12 23:05:00.564000 audit: BPF prog-id=612 op=LOAD Jun 12 23:05:00.564000 audit[13150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=787fbef8df98 a2=98 a3=0 items=0 ppid=13137 pid=13150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663839646632313561373164303466323166613964646461 Jun 12 23:05:00.564000 audit: BPF prog-id=612 op=UNLOAD Jun 12 23:05:00.564000 audit[13150]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=13137 pid=13150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663839646632313561373164303466323166613964646461 Jun 12 23:05:00.564000 audit: BPF prog-id=611 op=UNLOAD Jun 12 23:05:00.564000 audit[13150]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13137 pid=13150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663839646632313561373164303466323166613964646461 Jun 12 23:05:00.564000 audit: BPF prog-id=613 op=LOAD Jun 12 23:05:00.564000 audit[13150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=787fbef8e4a8 a2=98 a3=0 items=0 ppid=13137 pid=13150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F34663839646632313561373164303466323166613964646461 Jun 12 23:05:00.585644 kernel: docker0: port 1(veth2d7d7cf) entered blocking state Jun 12 23:05:00.585731 kernel: docker0: port 1(veth2d7d7cf) entered disabled state Jun 12 23:05:00.588709 kernel: veth2d7d7cf: entered allmulticast mode Jun 12 23:05:00.591546 kernel: veth2d7d7cf: entered promiscuous mode Jun 12 23:05:00.575000 audit: ANOM_PROMISCUOUS dev=veth2d7d7cf prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:00.575000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b52faa0 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.575000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:00.592228 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:05:00.594000 audit[13170]: NETFILTER_CFG table=raw:263 family=2 entries=1 op=nft_register_rule pid=13170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:00.594000 audit[13170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffc2cff110 a2=0 a3=0 items=0 ppid=2935 pid=13170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:00.594000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:00.595826 systemd-networkd[2176]: veth2d7d7cf: Link UP Jun 12 23:05:00.613680 kernel: eth0: renamed from veth2a272ee Jun 12 23:05:00.613751 kernel: docker0: port 1(veth2d7d7cf) entered blocking state Jun 12 23:05:00.617239 kernel: docker0: port 1(veth2d7d7cf) entered forwarding state Jun 12 23:05:00.617667 systemd-networkd[2176]: veth2d7d7cf: Gained carrier Jun 12 23:05:00.617884 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:05:01.654594 systemd[1]: docker-4f89df215a71d04f21fa9dddab03073d438c1b1db83ca98993895794e9fac3db.scope: Deactivated successfully. Jun 12 23:05:01.666365 dockerd[2935]: time="2026-06-12T23:05:01.666311351Z" level=info msg="ignoring event" container=4f89df215a71d04f21fa9dddab03073d438c1b1db83ca98993895794e9fac3db module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:05:01.667129 containerd[2455]: time="2026-06-12T23:05:01.666905508Z" level=info msg="shim disconnected" id=4f89df215a71d04f21fa9dddab03073d438c1b1db83ca98993895794e9fac3db namespace=moby Jun 12 23:05:01.667129 containerd[2455]: time="2026-06-12T23:05:01.667056669Z" level=info msg="cleaning up after shim disconnected" id=4f89df215a71d04f21fa9dddab03073d438c1b1db83ca98993895794e9fac3db namespace=moby Jun 12 23:05:01.667129 containerd[2455]: time="2026-06-12T23:05:01.667071179Z" level=info msg="cleaning up dead shim" id=4f89df215a71d04f21fa9dddab03073d438c1b1db83ca98993895794e9fac3db namespace=moby Jun 12 23:05:01.690261 systemd-networkd[2176]: veth2d7d7cf: Lost carrier Jun 12 23:05:01.693015 kernel: docker0: port 1(veth2d7d7cf) entered disabled state Jun 12 23:05:01.693105 kernel: veth2a272ee: renamed from eth0 Jun 12 23:05:01.708000 audit[13200]: NETFILTER_CFG table=raw:264 family=2 entries=1 op=nft_unregister_rule pid=13200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:01.708000 audit[13200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=fffff615eb30 a2=0 a3=0 items=0 ppid=2935 pid=13200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.708000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:01.718136 systemd-networkd[2176]: veth2d7d7cf: Link DOWN Jun 12 23:05:01.721798 kernel: docker0: port 1(veth2d7d7cf) entered disabled state Jun 12 23:05:01.728545 kernel: veth2d7d7cf (unregistering): left allmulticast mode Jun 12 23:05:01.728619 kernel: veth2d7d7cf (unregistering): left promiscuous mode Jun 12 23:05:01.717000 audit: ANOM_PROMISCUOUS dev=veth2d7d7cf prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:01.728866 kernel: docker0: port 1(veth2d7d7cf) entered disabled state Jun 12 23:05:01.717000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b8db2a0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.717000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:01.743171 systemd[1]: run-docker-netns-87c0a330ec8b.mount: Deactivated successfully. Jun 12 23:05:01.748170 systemd[1]: var-lib-docker-overlay2-41dc571299d7b356a2b79cf55657c6efecbc027afe3b7eb16df4f4f491ed0dc4-merged.mount: Deactivated successfully. Jun 12 23:05:01.753000 audit: BPF prog-id=609 op=UNLOAD Jun 12 23:05:01.753000 audit: BPF prog-id=613 op=UNLOAD Jun 12 23:05:01.838721 systemd[1]: var-lib-docker-overlay2-64f7b62fac0f1448fb0ac62d8eb91e18a21b0c7e5bdbeb7ba93c2cdd5e0e44b1\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:05:01.923023 containerd[2455]: time="2026-06-12T23:05:01.922889693Z" level=info msg="connecting to shim 7b352276bca045d743d1f9e29af19e30b09a9fbd663f041208af53d24324fd95" address="unix:///run/containerd/s/e0ee43c14ba20f063faa07a1b2364960534fb4f802bc0984a9d7755a52e8ac55" namespace=moby protocol=ttrpc version=3 Jun 12 23:05:01.943951 systemd[1]: Started docker-7b352276bca045d743d1f9e29af19e30b09a9fbd663f041208af53d24324fd95.scope - libcontainer container 7b352276bca045d743d1f9e29af19e30b09a9fbd663f041208af53d24324fd95. Jun 12 23:05:01.952000 audit: BPF prog-id=614 op=LOAD Jun 12 23:05:01.952000 audit: BPF prog-id=615 op=LOAD Jun 12 23:05:01.952000 audit[13229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2a27a3a37f80 a2=98 a3=0 items=0 ppid=13218 pid=13229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.952000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37623335323237366263613034356437343364316639653239 Jun 12 23:05:01.953000 audit: BPF prog-id=615 op=UNLOAD Jun 12 23:05:01.953000 audit[13229]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13218 pid=13229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37623335323237366263613034356437343364316639653239 Jun 12 23:05:01.953000 audit: BPF prog-id=616 op=LOAD Jun 12 23:05:01.953000 audit[13229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2a27a3a38258 a2=98 a3=0 items=0 ppid=13218 pid=13229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37623335323237366263613034356437343364316639653239 Jun 12 23:05:01.953000 audit: BPF prog-id=617 op=LOAD Jun 12 23:05:01.953000 audit[13229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=2a27a3a37f98 a2=98 a3=0 items=0 ppid=13218 pid=13229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37623335323237366263613034356437343364316639653239 Jun 12 23:05:01.953000 audit: BPF prog-id=617 op=UNLOAD Jun 12 23:05:01.953000 audit[13229]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=13218 pid=13229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37623335323237366263613034356437343364316639653239 Jun 12 23:05:01.953000 audit: BPF prog-id=616 op=UNLOAD Jun 12 23:05:01.953000 audit[13229]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13218 pid=13229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37623335323237366263613034356437343364316639653239 Jun 12 23:05:01.954000 audit: BPF prog-id=618 op=LOAD Jun 12 23:05:01.954000 audit[13229]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2a27a3a384a8 a2=98 a3=0 items=0 ppid=13218 pid=13229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F37623335323237366263613034356437343364316639653239 Jun 12 23:05:01.974207 kernel: docker0: port 1(vethe1a9c44) entered blocking state Jun 12 23:05:01.974295 kernel: docker0: port 1(vethe1a9c44) entered disabled state Jun 12 23:05:01.977144 kernel: vethe1a9c44: entered allmulticast mode Jun 12 23:05:01.979985 kernel: vethe1a9c44: entered promiscuous mode Jun 12 23:05:01.966000 audit: ANOM_PROMISCUOUS dev=vethe1a9c44 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:01.966000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760beab560 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.966000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:01.980923 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:05:01.982000 audit[13250]: NETFILTER_CFG table=raw:265 family=2 entries=1 op=nft_register_rule pid=13250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:01.982000 audit[13250]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd084e900 a2=0 a3=0 items=0 ppid=2935 pid=13250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:01.982000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:01.985223 systemd-networkd[2176]: vethe1a9c44: Link UP Jun 12 23:05:01.999807 kernel: eth0: renamed from veth179b9e3 Jun 12 23:05:02.007113 kernel: docker0: port 1(vethe1a9c44) entered blocking state Jun 12 23:05:02.007187 kernel: docker0: port 1(vethe1a9c44) entered forwarding state Jun 12 23:05:02.007889 systemd-networkd[2176]: vethe1a9c44: Gained carrier Jun 12 23:05:02.008088 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:05:03.032285 systemd[1]: docker-7b352276bca045d743d1f9e29af19e30b09a9fbd663f041208af53d24324fd95.scope: Deactivated successfully. Jun 12 23:05:03.046262 containerd[2455]: time="2026-06-12T23:05:03.046187227Z" level=info msg="shim disconnected" id=7b352276bca045d743d1f9e29af19e30b09a9fbd663f041208af53d24324fd95 namespace=moby Jun 12 23:05:03.046262 containerd[2455]: time="2026-06-12T23:05:03.046212049Z" level=info msg="cleaning up after shim disconnected" id=7b352276bca045d743d1f9e29af19e30b09a9fbd663f041208af53d24324fd95 namespace=moby Jun 12 23:05:03.046262 containerd[2455]: time="2026-06-12T23:05:03.046217608Z" level=info msg="cleaning up dead shim" id=7b352276bca045d743d1f9e29af19e30b09a9fbd663f041208af53d24324fd95 namespace=moby Jun 12 23:05:03.046866 dockerd[2935]: time="2026-06-12T23:05:03.046203506Z" level=info msg="ignoring event" container=7b352276bca045d743d1f9e29af19e30b09a9fbd663f041208af53d24324fd95 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:05:03.066675 systemd-networkd[2176]: vethe1a9c44: Lost carrier Jun 12 23:05:03.066960 kernel: docker0: port 1(vethe1a9c44) entered disabled state Jun 12 23:05:03.070796 kernel: veth179b9e3: renamed from eth0 Jun 12 23:05:03.083000 audit[13280]: NETFILTER_CFG table=raw:266 family=2 entries=1 op=nft_unregister_rule pid=13280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:03.083000 audit[13280]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffe8f8f310 a2=0 a3=0 items=0 ppid=2935 pid=13280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.083000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:03.091166 systemd-networkd[2176]: vethe1a9c44: Link DOWN Jun 12 23:05:03.095794 kernel: docker0: port 1(vethe1a9c44) entered disabled state Jun 12 23:05:03.102701 kernel: vethe1a9c44 (unregistering): left allmulticast mode Jun 12 23:05:03.102769 kernel: vethe1a9c44 (unregistering): left promiscuous mode Jun 12 23:05:03.090000 audit: ANOM_PROMISCUOUS dev=vethe1a9c44 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:03.107745 kernel: docker0: port 1(vethe1a9c44) entered disabled state Jun 12 23:05:03.090000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760b23dd60 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.090000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:03.118037 systemd[1]: run-docker-netns-f1fa8510164e.mount: Deactivated successfully. Jun 12 23:05:03.122012 systemd[1]: var-lib-docker-overlay2-64f7b62fac0f1448fb0ac62d8eb91e18a21b0c7e5bdbeb7ba93c2cdd5e0e44b1-merged.mount: Deactivated successfully. Jun 12 23:05:03.130000 audit: BPF prog-id=614 op=UNLOAD Jun 12 23:05:03.130000 audit: BPF prog-id=618 op=UNLOAD Jun 12 23:05:03.223262 systemd[1]: var-lib-docker-overlay2-b6858599cddf666d43c42740728c23498ee010646d5cf65bfba7bf363c58be61\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:05:03.284764 containerd[2455]: time="2026-06-12T23:05:03.284445720Z" level=info msg="connecting to shim 9017e89811195ba89f882e3d95a396319662d46b82dc7981ed846dd9e2507d2e" address="unix:///run/containerd/s/f1837d65161b34e896fe900f1acaf88f5da0191f8619066ea8c7bb8c2ee7630a" namespace=moby protocol=ttrpc version=3 Jun 12 23:05:03.301921 systemd[1]: Started docker-9017e89811195ba89f882e3d95a396319662d46b82dc7981ed846dd9e2507d2e.scope - libcontainer container 9017e89811195ba89f882e3d95a396319662d46b82dc7981ed846dd9e2507d2e. Jun 12 23:05:03.307000 audit: BPF prog-id=619 op=LOAD Jun 12 23:05:03.308000 audit: BPF prog-id=620 op=LOAD Jun 12 23:05:03.308000 audit[13309]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7127fea3df80 a2=98 a3=0 items=0 ppid=13298 pid=13309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39303137653839383131313935626138396638383265336439 Jun 12 23:05:03.308000 audit: BPF prog-id=620 op=UNLOAD Jun 12 23:05:03.308000 audit[13309]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13298 pid=13309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39303137653839383131313935626138396638383265336439 Jun 12 23:05:03.308000 audit: BPF prog-id=621 op=LOAD Jun 12 23:05:03.308000 audit[13309]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7127fea3e258 a2=98 a3=0 items=0 ppid=13298 pid=13309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39303137653839383131313935626138396638383265336439 Jun 12 23:05:03.308000 audit: BPF prog-id=622 op=LOAD Jun 12 23:05:03.308000 audit[13309]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=7127fea3df98 a2=98 a3=0 items=0 ppid=13298 pid=13309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39303137653839383131313935626138396638383265336439 Jun 12 23:05:03.308000 audit: BPF prog-id=622 op=UNLOAD Jun 12 23:05:03.308000 audit[13309]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=13298 pid=13309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39303137653839383131313935626138396638383265336439 Jun 12 23:05:03.308000 audit: BPF prog-id=621 op=UNLOAD Jun 12 23:05:03.308000 audit[13309]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13298 pid=13309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39303137653839383131313935626138396638383265336439 Jun 12 23:05:03.308000 audit: BPF prog-id=623 op=LOAD Jun 12 23:05:03.308000 audit[13309]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7127fea3e4a8 a2=98 a3=0 items=0 ppid=13298 pid=13309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F39303137653839383131313935626138396638383265336439 Jun 12 23:05:03.323965 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:05:03.328567 kernel: docker0: port 1(veth19b6efc) entered blocking state Jun 12 23:05:03.328628 kernel: docker0: port 1(veth19b6efc) entered disabled state Jun 12 23:05:03.331341 kernel: veth19b6efc: entered allmulticast mode Jun 12 23:05:03.334015 kernel: veth19b6efc: entered promiscuous mode Jun 12 23:05:03.319000 audit: ANOM_PROMISCUOUS dev=veth19b6efc prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:03.319000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760bc30060 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.319000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:03.335000 audit[13332]: NETFILTER_CFG table=raw:267 family=2 entries=1 op=nft_register_rule pid=13332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:03.335000 audit[13332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffdaa60b20 a2=0 a3=0 items=0 ppid=2935 pid=13332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:03.335000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:03.337537 systemd-networkd[2176]: veth19b6efc: Link UP Jun 12 23:05:03.350800 kernel: eth0: renamed from veth75be4c1 Jun 12 23:05:03.357546 kernel: docker0: port 1(veth19b6efc) entered blocking state Jun 12 23:05:03.357622 kernel: docker0: port 1(veth19b6efc) entered forwarding state Jun 12 23:05:03.358373 systemd-networkd[2176]: veth19b6efc: Gained carrier Jun 12 23:05:03.358702 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:05:04.384065 systemd[1]: docker-9017e89811195ba89f882e3d95a396319662d46b82dc7981ed846dd9e2507d2e.scope: Deactivated successfully. Jun 12 23:05:04.396430 containerd[2455]: time="2026-06-12T23:05:04.396395388Z" level=info msg="shim disconnected" id=9017e89811195ba89f882e3d95a396319662d46b82dc7981ed846dd9e2507d2e namespace=moby Jun 12 23:05:04.397014 containerd[2455]: time="2026-06-12T23:05:04.396803667Z" level=info msg="cleaning up after shim disconnected" id=9017e89811195ba89f882e3d95a396319662d46b82dc7981ed846dd9e2507d2e namespace=moby Jun 12 23:05:04.397014 containerd[2455]: time="2026-06-12T23:05:04.396820137Z" level=info msg="cleaning up dead shim" id=9017e89811195ba89f882e3d95a396319662d46b82dc7981ed846dd9e2507d2e namespace=moby Jun 12 23:05:04.420498 systemd-networkd[2176]: veth19b6efc: Lost carrier Jun 12 23:05:04.420952 kernel: docker0: port 1(veth19b6efc) entered disabled state Jun 12 23:05:04.424795 kernel: veth75be4c1: renamed from eth0 Jun 12 23:05:04.436000 audit[13364]: NETFILTER_CFG table=raw:268 family=2 entries=1 op=nft_unregister_rule pid=13364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:04.441366 kernel: kauditd_printk_skb: 134 callbacks suppressed Jun 12 23:05:04.441426 kernel: audit: type=1325 audit(1781305504.436:2299): table=raw:268 family=2 entries=1 op=nft_unregister_rule pid=13364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:04.436000 audit[13364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd197e010 a2=0 a3=0 items=0 ppid=2935 pid=13364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:04.467240 kernel: audit: type=1300 audit(1781305504.436:2299): arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd197e010 a2=0 a3=0 items=0 ppid=2935 pid=13364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:04.436000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:04.478870 kernel: audit: type=1327 audit(1781305504.436:2299): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:04.486403 systemd-networkd[2176]: veth19b6efc: Link DOWN Jun 12 23:05:04.489798 kernel: docker0: port 1(veth19b6efc) entered disabled state Jun 12 23:05:04.496587 kernel: veth19b6efc (unregistering): left allmulticast mode Jun 12 23:05:04.496640 kernel: veth19b6efc (unregistering): left promiscuous mode Jun 12 23:05:04.500455 kernel: docker0: port 1(veth19b6efc) entered disabled state Jun 12 23:05:04.484000 audit: ANOM_PROMISCUOUS dev=veth19b6efc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:04.507345 kernel: audit: type=1700 audit(1781305504.484:2300): dev=veth19b6efc prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:04.484000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6460 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:04.484000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:04.532852 kernel: audit: type=1300 audit(1781305504.484:2300): arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f6460 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:04.532901 kernel: audit: type=1327 audit(1781305504.484:2300): proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:04.549067 systemd[1]: run-docker-netns-8cad60283d3c.mount: Deactivated successfully. Jun 12 23:05:04.555040 systemd[1]: var-lib-docker-overlay2-b6858599cddf666d43c42740728c23498ee010646d5cf65bfba7bf363c58be61-merged.mount: Deactivated successfully. Jun 12 23:05:04.565000 audit: BPF prog-id=619 op=UNLOAD Jun 12 23:05:04.565000 audit: BPF prog-id=623 op=UNLOAD Jun 12 23:05:04.583504 kernel: audit: type=1334 audit(1781305504.565:2301): prog-id=619 op=UNLOAD Jun 12 23:05:04.583543 kernel: audit: type=1334 audit(1781305504.565:2302): prog-id=623 op=UNLOAD Jun 12 23:05:04.752920 sshd[4615]: Connection closed by 50.85.169.122 port 41870 Jun 12 23:05:04.754950 sshd-session[4611]: pam_unix(sshd:session): session closed for user core Jun 12 23:05:04.753000 audit[4611]: AUDIT1106 pid=4611 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:04.777131 systemd[1]: sshd@23-4102-10.0.0.35:22-50.85.169.122:41870.service: Deactivated successfully. Jun 12 23:05:04.753000 audit[4611]: AUDIT1104 pid=4611 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:04.779561 systemd[1]: session-27.scope: Deactivated successfully. Jun 12 23:05:04.779801 systemd[1]: session-27.scope: Consumed 1.234s CPU time over 2min 19.451s wall clock time, 16.7M memory peak. Jun 12 23:05:04.793066 kernel: audit: type=1106 audit(1781305504.753:2303): pid=4611 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:04.793147 kernel: audit: type=1104 audit(1781305504.753:2304): pid=4611 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:04.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4102-10.0.0.35:22-50.85.169.122:41870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:04.794336 systemd-logind[2431]: Session 27 logged out. Waiting for processes to exit. Jun 12 23:05:04.795937 systemd-logind[2431]: Removed session 27. Jun 12 23:05:04.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-71-10.0.0.35:22-50.85.169.122:39522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:04.906254 systemd[1]: Started sshd@125-71-10.0.0.35:22-50.85.169.122:39522.service - OpenSSH per-connection server daemon (50.85.169.122:39522). Jun 12 23:05:05.443373 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:05:05.651000 audit[13370]: AUDIT1101 pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:05.652580 sshd[13370]: Accepted publickey for core from 50.85.169.122 port 39522 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:05:05.652000 audit[13370]: AUDIT1103 pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:05.652000 audit[13370]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd9ea3660 a2=3 a3=0 items=0 ppid=1 pid=13370 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:05.652000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:05:05.654029 sshd-session[13370]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:05:05.658340 systemd-logind[2431]: New session '28' of user 'core' with class 'user' and type 'tty'. Jun 12 23:05:05.664934 systemd[1]: Started session-28.scope - Session 28 of User core. Jun 12 23:05:05.666000 audit[13370]: AUDIT1105 pid=13370 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:05.668000 audit[13374]: AUDIT1103 pid=13374 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:05.943000 audit[13379]: AUDIT1101 pid=13379 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:05.944828 sudo[13379]: core : PWD=/tmp/tmp.0aVYKWxJm5 ; USER=root ; COMMAND=/usr/sbin/ldd /usr/bin/capsh /usr/bin/sh /usr/bin/grep /usr/bin/cat /usr/bin/ls Jun 12 23:05:05.945052 sudo[13379]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:05:05.944000 audit[13379]: AUDIT1110 pid=13379 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:05.944000 audit[13379]: AUDIT1105 pid=13379 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:05.957592 sudo[13379]: pam_unix(sudo:session): session closed for user root Jun 12 23:05:05.956000 audit[13379]: AUDIT1106 pid=13379 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:05.956000 audit[13379]: AUDIT1104 pid=13379 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:05.961000 audit[13404]: AUDIT1101 pid=13404 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:05.962757 sudo[13404]: core : PWD=/tmp/tmp.0aVYKWxJm5 ; USER=root ; COMMAND=/usr/sbin/rsync -av --relative --copy-links /usr/bin/capsh /usr/bin/sh /usr/bin/grep /usr/bin/cat /usr/bin/ls /lib/ld-linux-aarch64.so.1 /lib64/ld-linux-aarch64.so.1 /lib64/libc.so.6 /lib64/libcap.so.2 /lib64/libpcre2-8.so.0 /lib64/libreadline.so.8 /lib64/libselinux.so.1 /lib64/libtinfo.so.6 /lib64/libtinfow.so.6 ./ Jun 12 23:05:05.962000 audit[13404]: AUDIT1110 pid=13404 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:05.962000 audit[13404]: AUDIT1105 pid=13404 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:05.963034 sudo[13404]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:05:06.014768 sudo[13404]: pam_unix(sudo:session): session closed for user root Jun 12 23:05:06.014000 audit[13404]: AUDIT1106 pid=13404 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:06.014000 audit[13404]: AUDIT1104 pid=13404 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:06.019000 audit[13375]: AUDIT1101 pid=13375 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:06.019991 sudo[13375]: core : PWD=/tmp/tmp.0aVYKWxJm5 ; USER=root ; COMMAND=/usr/sbin/docker build -t captest . Jun 12 23:05:06.020204 sudo[13375]: pam_unix(sudo:session): session opened for user root(uid=0) by core(uid=500) Jun 12 23:05:06.019000 audit[13375]: AUDIT1110 pid=13375 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:06.019000 audit[13375]: AUDIT1105 pid=13375 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:06.583790 sudo[13375]: pam_unix(sudo:session): session closed for user root Jun 12 23:05:06.583000 audit[13375]: AUDIT1106 pid=13375 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:06.583000 audit[13375]: AUDIT1104 pid=13375 uid=500 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jun 12 23:05:06.726727 sshd[13374]: Connection closed by 50.85.169.122 port 39522 Jun 12 23:05:06.726656 sshd-session[13370]: pam_unix(sshd:session): session closed for user core Jun 12 23:05:06.726000 audit[13370]: AUDIT1106 pid=13370 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:06.726000 audit[13370]: AUDIT1104 pid=13370 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:06.730040 systemd[1]: sshd@125-71-10.0.0.35:22-50.85.169.122:39522.service: Deactivated successfully. Jun 12 23:05:06.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@125-71-10.0.0.35:22-50.85.169.122:39522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:06.731964 systemd[1]: session-28.scope: Deactivated successfully. Jun 12 23:05:06.733289 systemd-logind[2431]: Session 28 logged out. Waiting for processes to exit. Jun 12 23:05:06.734289 systemd-logind[2431]: Removed session 28. Jun 12 23:05:06.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-4152-10.0.0.35:22-50.85.169.122:39524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:06.880022 systemd[1]: Started sshd@126-4152-10.0.0.35:22-50.85.169.122:39524.service - OpenSSH per-connection server daemon (50.85.169.122:39524). Jun 12 23:05:07.226913 systemd[1]: var-lib-docker-tmp-buildkit\x2dmount3072308297.mount: Deactivated successfully. Jun 12 23:05:07.622000 audit[13468]: AUDIT1101 pid=13468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:07.623615 sshd[13468]: Accepted publickey for core from 50.85.169.122 port 39524 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:05:07.623000 audit[13468]: AUDIT1103 pid=13468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:07.623000 audit[13468]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff5a4e100 a2=3 a3=0 items=0 ppid=1 pid=13468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:07.623000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:05:07.625084 sshd-session[13468]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:05:07.629176 systemd-logind[2431]: New session '29' of user 'core' with class 'user' and type 'tty'. Jun 12 23:05:07.637920 systemd[1]: Started session-29.scope - Session 29 of User core. Jun 12 23:05:07.639000 audit[13468]: AUDIT1105 pid=13468 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:07.641000 audit[13472]: AUDIT1103 pid=13472 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:07.934259 systemd[1]: var-lib-docker-overlay2-51c906d23f89d24124cc1a13e0f6fb38670c8d5c642cbacb818591331c1dbca3\x2dinit-merged.mount: Deactivated successfully. Jun 12 23:05:08.110653 containerd[2455]: time="2026-06-12T23:05:08.110612973Z" level=info msg="connecting to shim 8dcf4e597dbb34fb9ba39cc11612abe86c6cb61e7f813e462f0e00706a04d840" address="unix:///run/containerd/s/9ee0b5088b793b7daff14d2ed40b051b54076a5eab52b304975c2743c576902e" namespace=moby protocol=ttrpc version=3 Jun 12 23:05:08.125161 systemd[1]: Started docker-8dcf4e597dbb34fb9ba39cc11612abe86c6cb61e7f813e462f0e00706a04d840.scope - libcontainer container 8dcf4e597dbb34fb9ba39cc11612abe86c6cb61e7f813e462f0e00706a04d840. Jun 12 23:05:08.132000 audit: BPF prog-id=624 op=LOAD Jun 12 23:05:08.132000 audit: BPF prog-id=625 op=LOAD Jun 12 23:05:08.132000 audit[13502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3abf190fdf80 a2=98 a3=0 items=0 ppid=13490 pid=13502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38646366346535393764626233346662396261333963633131 Jun 12 23:05:08.132000 audit: BPF prog-id=625 op=UNLOAD Jun 12 23:05:08.132000 audit[13502]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13490 pid=13502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38646366346535393764626233346662396261333963633131 Jun 12 23:05:08.132000 audit: BPF prog-id=626 op=LOAD Jun 12 23:05:08.132000 audit[13502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3abf190fe258 a2=98 a3=0 items=0 ppid=13490 pid=13502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38646366346535393764626233346662396261333963633131 Jun 12 23:05:08.132000 audit: BPF prog-id=627 op=LOAD Jun 12 23:05:08.132000 audit[13502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3abf190fdf98 a2=98 a3=0 items=0 ppid=13490 pid=13502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38646366346535393764626233346662396261333963633131 Jun 12 23:05:08.133000 audit: BPF prog-id=627 op=UNLOAD Jun 12 23:05:08.133000 audit[13502]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=13490 pid=13502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38646366346535393764626233346662396261333963633131 Jun 12 23:05:08.133000 audit: BPF prog-id=626 op=UNLOAD Jun 12 23:05:08.133000 audit[13502]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13490 pid=13502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38646366346535393764626233346662396261333963633131 Jun 12 23:05:08.133000 audit: BPF prog-id=628 op=LOAD Jun 12 23:05:08.133000 audit[13502]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3abf190fe4a8 a2=98 a3=0 items=0 ppid=13490 pid=13502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F38646366346535393764626233346662396261333963633131 Jun 12 23:05:08.157136 kernel: docker0: port 1(veth50da5c2) entered blocking state Jun 12 23:05:08.157201 kernel: docker0: port 1(veth50da5c2) entered disabled state Jun 12 23:05:08.160100 kernel: veth50da5c2: entered allmulticast mode Jun 12 23:05:08.163177 kernel: veth50da5c2: entered promiscuous mode Jun 12 23:05:08.147000 audit: ANOM_PROMISCUOUS dev=veth50da5c2 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:08.147000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760b337d70 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.147000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:08.166000 audit[13524]: NETFILTER_CFG table=raw:269 family=2 entries=1 op=nft_register_rule pid=13524 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:08.166000 audit[13524]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=fffffe88a0b0 a2=0 a3=0 items=0 ppid=2935 pid=13524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.166000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:08.170595 systemd-networkd[2176]: veth50da5c2: Link UP Jun 12 23:05:08.197931 kernel: eth0: renamed from veth20a3284 Jun 12 23:05:08.197999 kernel: docker0: port 1(veth50da5c2) entered blocking state Jun 12 23:05:08.198014 kernel: docker0: port 1(veth50da5c2) entered forwarding state Jun 12 23:05:08.198237 systemd-networkd[2176]: veth50da5c2: Gained carrier Jun 12 23:05:08.199019 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:05:08.225680 systemd[1]: docker-8dcf4e597dbb34fb9ba39cc11612abe86c6cb61e7f813e462f0e00706a04d840.scope: Deactivated successfully. Jun 12 23:05:08.241652 dockerd[2935]: time="2026-06-12T23:05:08.241606826Z" level=info msg="ignoring event" container=8dcf4e597dbb34fb9ba39cc11612abe86c6cb61e7f813e462f0e00706a04d840 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:05:08.241984 containerd[2455]: time="2026-06-12T23:05:08.241827645Z" level=info msg="shim disconnected" id=8dcf4e597dbb34fb9ba39cc11612abe86c6cb61e7f813e462f0e00706a04d840 namespace=moby Jun 12 23:05:08.241984 containerd[2455]: time="2026-06-12T23:05:08.241853314Z" level=info msg="cleaning up after shim disconnected" id=8dcf4e597dbb34fb9ba39cc11612abe86c6cb61e7f813e462f0e00706a04d840 namespace=moby Jun 12 23:05:08.241984 containerd[2455]: time="2026-06-12T23:05:08.241859385Z" level=info msg="cleaning up dead shim" id=8dcf4e597dbb34fb9ba39cc11612abe86c6cb61e7f813e462f0e00706a04d840 namespace=moby Jun 12 23:05:08.269501 systemd-networkd[2176]: veth50da5c2: Lost carrier Jun 12 23:05:08.269937 kernel: docker0: port 1(veth50da5c2) entered disabled state Jun 12 23:05:08.273808 kernel: veth20a3284: renamed from eth0 Jun 12 23:05:08.287000 audit[13558]: NETFILTER_CFG table=raw:270 family=2 entries=1 op=nft_unregister_rule pid=13558 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:08.287000 audit[13558]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd239ec20 a2=0 a3=0 items=0 ppid=2935 pid=13558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.287000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:08.295148 systemd-networkd[2176]: veth50da5c2: Link DOWN Jun 12 23:05:08.298806 kernel: docker0: port 1(veth50da5c2) entered disabled state Jun 12 23:05:08.305922 kernel: veth50da5c2 (unregistering): left allmulticast mode Jun 12 23:05:08.305986 kernel: veth50da5c2 (unregistering): left promiscuous mode Jun 12 23:05:08.294000 audit: ANOM_PROMISCUOUS dev=veth50da5c2 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:08.309559 kernel: docker0: port 1(veth50da5c2) entered disabled state Jun 12 23:05:08.294000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3f67e0 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:08.294000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:08.321026 systemd[1]: run-docker-netns-0c36d6db6391.mount: Deactivated successfully. Jun 12 23:05:08.323546 systemd[1]: var-lib-docker-overlay2-51c906d23f89d24124cc1a13e0f6fb38670c8d5c642cbacb818591331c1dbca3-merged.mount: Deactivated successfully. Jun 12 23:05:08.341000 audit: BPF prog-id=624 op=UNLOAD Jun 12 23:05:08.341000 audit: BPF prog-id=628 op=UNLOAD Jun 12 23:05:08.528350 sshd[13472]: Connection closed by 50.85.169.122 port 39524 Jun 12 23:05:08.528045 sshd-session[13468]: pam_unix(sshd:session): session closed for user core Jun 12 23:05:08.527000 audit[13468]: AUDIT1106 pid=13468 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:08.527000 audit[13468]: AUDIT1104 pid=13468 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:08.531047 systemd[1]: sshd@126-4152-10.0.0.35:22-50.85.169.122:39524.service: Deactivated successfully. Jun 12 23:05:08.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@126-4152-10.0.0.35:22-50.85.169.122:39524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:08.533009 systemd[1]: session-29.scope: Deactivated successfully. Jun 12 23:05:08.533843 systemd-logind[2431]: Session 29 logged out. Waiting for processes to exit. Jun 12 23:05:08.535715 systemd-logind[2431]: Removed session 29. Jun 12 23:05:08.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-72-10.0.0.35:22-50.85.169.122:39528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:08.680319 systemd[1]: Started sshd@127-72-10.0.0.35:22-50.85.169.122:39528.service - OpenSSH per-connection server daemon (50.85.169.122:39528). Jun 12 23:05:09.155167 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:05:09.425000 audit[13563]: AUDIT1101 pid=13563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:09.427555 sshd[13563]: Accepted publickey for core from 50.85.169.122 port 39528 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:05:09.427000 audit[13563]: AUDIT1103 pid=13563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:09.427000 audit[13563]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff1aaba50 a2=3 a3=0 items=0 ppid=1 pid=13563 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:09.427000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:05:09.428372 sshd-session[13563]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:05:09.432410 systemd-logind[2431]: New session '30' of user 'core' with class 'user' and type 'tty'. Jun 12 23:05:09.438929 systemd[1]: Started session-30.scope - Session 30 of User core. Jun 12 23:05:09.440000 audit[13563]: AUDIT1105 pid=13563 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:09.445091 kernel: kauditd_printk_skb: 80 callbacks suppressed Jun 12 23:05:09.445141 kernel: audit: type=1105 audit(1781305509.440:2357): pid=13563 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:09.449000 audit[13567]: AUDIT1103 pid=13567 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:09.477251 kernel: audit: type=1103 audit(1781305509.449:2358): pid=13567 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:12.258750 systemd[1]: var-lib-docker-overlay2-ad8f0b80dcfb014a43fc3d3e116bcefbfa039ba9aec88c032c897bc259da42e2-merged.mount: Deactivated successfully. Jun 12 23:05:13.640950 systemd[1]: var-lib-docker-overlay2-ff260d882a4e7f92b4d60b0dfb34bc1e0f9d670b312dcf7b66deb38d01caea59-merged.mount: Deactivated successfully. Jun 12 23:05:13.699393 systemd[1]: var-lib-docker-overlay2-6af4d2df5ce570ca258fe80c6f979e0612ba49c4e9ddccae5a4920aa4ccf01c1-merged.mount: Deactivated successfully. Jun 12 23:05:14.050264 containerd[2455]: time="2026-06-12T23:05:14.050222849Z" level=info msg="connecting to shim b4f508f3387f442b9a6d9445ed7c0cc77076bdba3112f9b3d5a129af2a37d9c0" address="unix:///run/containerd/s/548ffb0fe78144cef51da1c9b851d647f3560f3dc72a12c2f54d6ed649078dd4" namespace=moby protocol=ttrpc version=3 Jun 12 23:05:14.068932 systemd[1]: Started docker-b4f508f3387f442b9a6d9445ed7c0cc77076bdba3112f9b3d5a129af2a37d9c0.scope - libcontainer container b4f508f3387f442b9a6d9445ed7c0cc77076bdba3112f9b3d5a129af2a37d9c0. Jun 12 23:05:14.080000 audit: BPF prog-id=629 op=LOAD Jun 12 23:05:14.084000 audit: BPF prog-id=630 op=LOAD Jun 12 23:05:14.090682 kernel: audit: type=1334 audit(1781305514.080:2359): prog-id=629 op=LOAD Jun 12 23:05:14.090750 kernel: audit: type=1334 audit(1781305514.084:2360): prog-id=630 op=LOAD Jun 12 23:05:14.084000 audit[13624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3c0b6a137f80 a2=98 a3=0 items=0 ppid=13612 pid=13624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.109152 kernel: audit: type=1300 audit(1781305514.084:2360): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3c0b6a137f80 a2=98 a3=0 items=0 ppid=13612 pid=13624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.084000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62346635303866333338376634343262396136643934343565 Jun 12 23:05:14.126451 kernel: audit: type=1327 audit(1781305514.084:2360): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62346635303866333338376634343262396136643934343565 Jun 12 23:05:14.084000 audit: BPF prog-id=630 op=UNLOAD Jun 12 23:05:14.131731 kernel: audit: type=1334 audit(1781305514.084:2361): prog-id=630 op=UNLOAD Jun 12 23:05:14.084000 audit[13624]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13612 pid=13624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.148324 kernel: audit: type=1300 audit(1781305514.084:2361): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13612 pid=13624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.084000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62346635303866333338376634343262396136643934343565 Jun 12 23:05:14.166370 kernel: audit: type=1327 audit(1781305514.084:2361): proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62346635303866333338376634343262396136643934343565 Jun 12 23:05:14.085000 audit: BPF prog-id=631 op=LOAD Jun 12 23:05:14.171576 kernel: audit: type=1334 audit(1781305514.085:2362): prog-id=631 op=LOAD Jun 12 23:05:14.085000 audit[13624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3c0b6a138258 a2=98 a3=0 items=0 ppid=13612 pid=13624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62346635303866333338376634343262396136643934343565 Jun 12 23:05:14.089000 audit: BPF prog-id=632 op=LOAD Jun 12 23:05:14.089000 audit[13624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=23 a0=5 a1=3c0b6a137f98 a2=98 a3=0 items=0 ppid=13612 pid=13624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62346635303866333338376634343262396136643934343565 Jun 12 23:05:14.089000 audit: BPF prog-id=632 op=UNLOAD Jun 12 23:05:14.089000 audit[13624]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=17 a1=0 a2=0 a3=0 items=0 ppid=13612 pid=13624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62346635303866333338376634343262396136643934343565 Jun 12 23:05:14.089000 audit: BPF prog-id=631 op=UNLOAD Jun 12 23:05:14.089000 audit[13624]: SYSCALL arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=13612 pid=13624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62346635303866333338376634343262396136643934343565 Jun 12 23:05:14.089000 audit: BPF prog-id=633 op=LOAD Jun 12 23:05:14.089000 audit[13624]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3c0b6a1384a8 a2=98 a3=0 items=0 ppid=13612 pid=13624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F7661722F72756E2F646F636B65722F72756E74696D652D72756E632F6D6F6279002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6D6F62792F62346635303866333338376634343262396136643934343565 Jun 12 23:05:14.185161 kernel: docker0: port 1(veth9e8209d) entered blocking state Jun 12 23:05:14.185214 kernel: docker0: port 1(veth9e8209d) entered disabled state Jun 12 23:05:14.188295 kernel: veth9e8209d: entered allmulticast mode Jun 12 23:05:14.191510 kernel: veth9e8209d: entered promiscuous mode Jun 12 23:05:14.175000 audit: ANOM_PROMISCUOUS dev=veth9e8209d prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:14.175000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=40 a0=d a1=33760c3c8a50 a2=28 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.175000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:14.192000 audit[13646]: NETFILTER_CFG table=raw:271 family=2 entries=1 op=nft_register_rule pid=13646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:14.192000 audit[13646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=388 a0=3 a1=ffffd3c8a2f0 a2=0 a3=0 items=0 ppid=2935 pid=13646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.192000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4100505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:14.195100 systemd-networkd[2176]: veth9e8209d: Link UP Jun 12 23:05:14.214022 kernel: eth0: renamed from vethe4f75cf Jun 12 23:05:14.214101 kernel: docker0: port 1(veth9e8209d) entered blocking state Jun 12 23:05:14.217733 kernel: docker0: port 1(veth9e8209d) entered forwarding state Jun 12 23:05:14.218142 systemd-networkd[2176]: veth9e8209d: Gained carrier Jun 12 23:05:14.218486 systemd-networkd[2176]: docker0: Gained carrier Jun 12 23:05:14.241790 systemd[1]: docker-b4f508f3387f442b9a6d9445ed7c0cc77076bdba3112f9b3d5a129af2a37d9c0.scope: Deactivated successfully. Jun 12 23:05:14.259123 dockerd[2935]: time="2026-06-12T23:05:14.259031847Z" level=info msg="ignoring event" container=b4f508f3387f442b9a6d9445ed7c0cc77076bdba3112f9b3d5a129af2a37d9c0 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete" Jun 12 23:05:14.260149 containerd[2455]: time="2026-06-12T23:05:14.260099645Z" level=info msg="shim disconnected" id=b4f508f3387f442b9a6d9445ed7c0cc77076bdba3112f9b3d5a129af2a37d9c0 namespace=moby Jun 12 23:05:14.260269 containerd[2455]: time="2026-06-12T23:05:14.260127875Z" level=info msg="cleaning up after shim disconnected" id=b4f508f3387f442b9a6d9445ed7c0cc77076bdba3112f9b3d5a129af2a37d9c0 namespace=moby Jun 12 23:05:14.260394 containerd[2455]: time="2026-06-12T23:05:14.260309314Z" level=info msg="cleaning up dead shim" id=b4f508f3387f442b9a6d9445ed7c0cc77076bdba3112f9b3d5a129af2a37d9c0 namespace=moby Jun 12 23:05:14.282798 kernel: docker0: port 1(veth9e8209d) entered disabled state Jun 12 23:05:14.282790 systemd-networkd[2176]: veth9e8209d: Lost carrier Jun 12 23:05:14.286797 kernel: vethe4f75cf: renamed from eth0 Jun 12 23:05:14.299000 audit[13679]: NETFILTER_CFG table=raw:272 family=2 entries=1 op=nft_unregister_rule pid=13679 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jun 12 23:05:14.299000 audit[13679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=380 a0=3 a1=ffffd2db6500 a2=0 a3=0 items=0 ppid=2935 pid=13679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.299000 audit: PROCTITLE proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D7400726177002D4400505245524F5554494E47002D64003137322E31372E302E320000002D6900646F636B657230002D6A0044524F50 Jun 12 23:05:14.305210 systemd-networkd[2176]: veth9e8209d: Link DOWN Jun 12 23:05:14.309817 kernel: docker0: port 1(veth9e8209d) entered disabled state Jun 12 23:05:14.318527 kernel: veth9e8209d (unregistering): left allmulticast mode Jun 12 23:05:14.318600 kernel: veth9e8209d (unregistering): left promiscuous mode Jun 12 23:05:14.303000 audit: ANOM_PROMISCUOUS dev=veth9e8209d prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 Jun 12 23:05:14.318866 kernel: docker0: port 1(veth9e8209d) entered disabled state Jun 12 23:05:14.303000 audit[2935]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=32 a0=d a1=33760c3c5380 a2=20 a3=0 items=0 ppid=1 pid=2935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dockerd" exe="/usr/bin/dockerd" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:14.303000 audit: PROCTITLE proctitle=2F7573722F62696E2F646F636B657264002D2D686F73743D66643A2F2F002D2D636F6E7461696E6572643D2F7661722F72756E2F646F636B65722F6C6962636F6E7461696E6572642F646F636B65722D636F6E7461696E6572642E736F636B002D2D73656C696E75782D656E61626C65643D74727565 Jun 12 23:05:14.352000 audit: BPF prog-id=629 op=UNLOAD Jun 12 23:05:14.352000 audit: BPF prog-id=633 op=UNLOAD Jun 12 23:05:14.530620 sshd[13567]: Connection closed by 50.85.169.122 port 39528 Jun 12 23:05:14.531905 sshd-session[13563]: pam_unix(sshd:session): session closed for user core Jun 12 23:05:14.530000 audit[13563]: AUDIT1106 pid=13563 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:14.537932 kernel: kauditd_printk_skb: 28 callbacks suppressed Jun 12 23:05:14.534688 systemd[1]: sshd@127-72-10.0.0.35:22-50.85.169.122:39528.service: Deactivated successfully. Jun 12 23:05:14.538161 kernel: audit: type=1106 audit(1781305514.530:2373): pid=13563 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:14.536471 systemd[1]: session-30.scope: Deactivated successfully. Jun 12 23:05:14.530000 audit[13563]: AUDIT1104 pid=13563 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:14.569498 kernel: audit: type=1104 audit(1781305514.530:2374): pid=13563 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:14.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-72-10.0.0.35:22-50.85.169.122:39528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:14.570347 systemd-logind[2431]: Session 30 logged out. Waiting for processes to exit. Jun 12 23:05:14.584468 kernel: audit: type=1131 audit(1781305514.530:2375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@127-72-10.0.0.35:22-50.85.169.122:39528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:14.585761 systemd-logind[2431]: Removed session 30. Jun 12 23:05:14.637017 systemd[1]: var-lib-docker-overlay2-a1dc8c8e1fbe64eb42f838db06e54419c8a14b43772a010e19d8812549b754ca-merged.mount: Deactivated successfully. Jun 12 23:05:14.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-4153-10.0.0.35:22-50.85.169.122:58814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:14.683467 systemd[1]: Started sshd@128-4153-10.0.0.35:22-50.85.169.122:58814.service - OpenSSH per-connection server daemon (50.85.169.122:58814). Jun 12 23:05:14.700807 kernel: audit: type=1130 audit(1781305514.681:2376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-4153-10.0.0.35:22-50.85.169.122:58814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:15.235096 systemd-networkd[2176]: docker0: Lost carrier Jun 12 23:05:15.446000 audit[13685]: AUDIT1101 pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:15.465024 sshd[13685]: Accepted publickey for core from 50.85.169.122 port 58814 ssh2: RSA SHA256:/VNjvLzBCM1Tprx3iSfqV7d52pIb6Kso5gHS8Eu3ze0 Jun 12 23:05:15.464000 audit[13685]: AUDIT1103 pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:15.466494 sshd-session[13685]: pam_unix(sshd:session): session opened for user core(uid=500) by core(uid=0) Jun 12 23:05:15.481898 kernel: audit: type=1101 audit(1781305515.446:2377): pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:15.481943 kernel: audit: type=1103 audit(1781305515.464:2378): pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:15.492012 kernel: audit: type=1006 audit(1781305515.464:2379): pid=13685 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=31 res=1 Jun 12 23:05:15.464000 audit[13685]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcaffdf20 a2=3 a3=0 items=0 ppid=1 pid=13685 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:15.510221 kernel: audit: type=1300 audit(1781305515.464:2379): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcaffdf20 a2=3 a3=0 items=0 ppid=1 pid=13685 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) Jun 12 23:05:15.464000 audit: PROCTITLE proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:05:15.517156 kernel: audit: type=1327 audit(1781305515.464:2379): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D Jun 12 23:05:15.519306 systemd-logind[2431]: New session '31' of user 'core' with class 'user' and type 'tty'. Jun 12 23:05:15.526070 systemd[1]: Started session-31.scope - Session 31 of User core. Jun 12 23:05:15.526000 audit[13685]: AUDIT1105 pid=13685 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:15.547000 audit[13689]: AUDIT1103 pid=13689 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:15.548902 kernel: audit: type=1105 audit(1781305515.526:2380): pid=13685 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:16.484293 systemd[1]: var-lib-docker-overlay2-d5f66b2fd4990180a0aee097d7deb860db8e2c0e7e9236dccec88b16e6d0eab4-merged.mount: Deactivated successfully. Jun 12 23:05:16.628831 sshd[13689]: Connection closed by 50.85.169.122 port 58814 Jun 12 23:05:16.629752 sshd-session[13685]: pam_unix(sshd:session): session closed for user core Jun 12 23:05:16.629000 audit[13685]: AUDIT1106 pid=13685 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:16.629000 audit[13685]: AUDIT1104 pid=13685 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=50.85.169.122 addr=50.85.169.122 terminal=ssh res=success' Jun 12 23:05:16.632289 systemd[1]: sshd@128-4153-10.0.0.35:22-50.85.169.122:58814.service: Deactivated successfully. Jun 12 23:05:16.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@128-4153-10.0.0.35:22-50.85.169.122:58814 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jun 12 23:05:16.634224 systemd[1]: session-31.scope: Deactivated successfully. Jun 12 23:05:16.635008 systemd-logind[2431]: Session 31 logged out. Waiting for processes to exit. Jun 12 23:05:16.636141 systemd-logind[2431]: Removed session 31.