62423.400:340): prog-id=39 op=UNLOAD [ 85.707220] audit: type=1334 audit(1784762423.400:341): prog-id=91 op=LOAD [ 85.708814] audit: type=1334 audit(1784762423.400:342): prog-id=92 op=LOAD [ 85.710518] audit: type=1334 audit(1784762423.400:343): prog-id=40 op=UNLOAD [ 85.712223] audit: type=1334 audit(1784762423.400:344): prog-id=41 op=UNLOAD [ 85.713908] audit: type=1334 audit(1784762423.403:345): prog-id=93 op=LOAD [ 85.715537] audit: type=1334 audit(1784762423.403:346): prog-id=42 op=UNLOAD [ 92.871488] kauditd_printk_skb: 44 callbacks suppressed [ 92.871494] audit: type=1334 audit(1784762430.568:391): prog-id=115 op=LOAD [ 92.875481] audit: type=1334 audit(1784762430.571:392): prog-id=116 op=LOAD [ 92.878774] audit: type=1300 audit(1784762430.571:392): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7b026045bf80 a2=98 a3=0 items=0 ppid=4045 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.888984] audit: type=1327 audit(1784762430.571:392): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739326231363831356162666364346630356562363030373464376531 [ 92.897665] audit: type=1334 audit(1784762430.571:393): prog-id=116 op=UNLOAD [ 92.899266] audit: type=1300 audit(1784762430.571:393): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4045 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.905987] audit: type=1327 audit(1784762430.571:393): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739326231363831356162666364346630356562363030373464376531 [ 92.916030] audit: type=1334 audit(1784762430.571:394): prog-id=117 op=LOAD [ 92.917393] audit: type=1300 audit(1784762430.571:394): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=7b026045c258 a2=98 a3=0 items=0 ppid=4045 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.924045] audit: type=1327 audit(1784762430.571:394): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739326231363831356162666364346630356562363030373464376531 [ 105.176881] kauditd_printk_skb: 224 callbacks suppressed [ 105.176887] audit: type=1106 audit(1784762442.873:471): pid=2762 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 105.183650] audit: type=1104 audit(1784762442.874:472): pid=2762 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 105.338736] audit: type=1106 audit(1784762443.035:473): pid=2757 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 105.347132] audit: type=1104 audit(1784762443.036:474): pid=2757 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 105.356650] audit: type=1131 audit(1784762443.046:475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4-172.31.17.49:22-20.103.240.199:56190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 112.152366] audit: type=1325 audit(1784762449.849:476): table=filter:103 family=2 entries=15 op=nft_register_rule pid=4388 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.155995] audit: type=1300 audit(1784762449.849:476): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffccbc8180 a2=0 a3=1 items=0 ppid=4100 pid=4388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.164012] audit: type=1327 audit(1784762449.849:476): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 112.172091] audit: type=1325 audit(1784762449.867:477): table=nat:104 family=2 entries=12 op=nft_register_rule pid=4388 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 112.177677] audit: type=1300 audit(1784762449.867:477): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffccbc8180 a2=0 a3=1 items=0 ppid=4100 pid=4388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.184558] audit: type=1327 audit(1784762449.867:477): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 113.264969] audit: type=1325 audit(1784762450.961:478): table=filter:105 family=2 entries=18 op=nft_register_rule pid=4391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 113.269045] audit: type=1300 audit(1784762450.961:478): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffccea1890 a2=0 a3=1 items=0 ppid=4100 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.275819] audit: type=1327 audit(1784762450.961:478): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 113.282438] audit: type=1325 audit(1784762450.979:479): table=nat:106 family=2 entries=12 op=nft_register_rule pid=4391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 119.607038] kauditd_printk_skb: 58 callbacks suppressed [ 119.607044] audit: type=1334 audit(1784762457.304:500): prog-id=143 op=LOAD [ 119.610976] audit: type=1334 audit(1784762457.307:501): prog-id=144 op=LOAD [ 119.612318] audit: type=1300 audit(1784762457.307:501): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4fc860b8df80 a2=98 a3=0 items=0 ppid=4405 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.620243] audit: type=1327 audit(1784762457.307:501): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762376265373736643035346663396564363561303631386664306535 [ 119.626865] audit: type=1334 audit(1784762457.307:502): prog-id=144 op=UNLOAD [ 119.629986] audit: type=1300 audit(1784762457.307:502): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4405 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.638999] audit: type=1327 audit(1784762457.307:502): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762376265373736643035346663396564363561303631386664306535 [ 119.646485] audit: type=1334 audit(1784762457.307:503): prog-id=145 op=LOAD [ 119.648996] audit: type=1300 audit(1784762457.307:503): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=4fc860b8e258 a2=98 a3=0 items=0 ppid=4405 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.656015] audit: type=1327 audit(1784762457.307:503): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762376265373736643035346663396564363561303631386664306535 [ 128.979282] kauditd_printk_skb: 28 callbacks suppressed [ 128.979287] audit: type=1334 audit(1784762466.676:514): prog-id=151 op=LOAD [ 128.982374] audit: type=1300 audit(1784762466.676:514): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=3d4e75e72258 a2=98 a3=0 items=0 ppid=4468 pid=4686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.988742] audit: type=1327 audit(1784762466.676:514): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134656562633736643238616331316264383466303866633738633364 [ 128.994384] audit: type=1334 audit(1784762466.676:515): prog-id=152 op=LOAD [ 128.995813] audit: type=1300 audit(1784762466.676:515): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=3d4e75e71f98 a2=98 a3=0 items=0 ppid=4468 pid=4686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.001427] audit: type=1327 audit(1784762466.676:515): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134656562633736643238616331316264383466303866633738633364 [ 129.009253] audit: type=1334 audit(1784762466.677:516): prog-id=152 op=UNLOAD [ 129.011864] audit: type=1300 audit(1784762466.677:516): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4468 pid=4686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 129.018049] audit: type=1327 audit(1784762466.677:516): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134656562633736643238616331316264383466303866633738633364 [ 129.023541] audit: type=1334 audit(1784762466.677:517): prog-id=151 op=UNLOAD [ 134.124622] kauditd_printk_skb: 12 callbacks suppressed [ 134.124627] audit: type=1334 audit(1784762471.821:522): prog-id=154 op=LOAD [ 134.128019] audit: type=1300 audit(1784762471.821:522): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=627c0e030258 a2=98 a3=0 items=0 ppid=4468 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.133900] audit: type=1327 audit(1784762471.821:522): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265666333326533613330336138363162623264363235363431396438 [ 134.139727] audit: type=1334 audit(1784762471.821:523): prog-id=155 op=LOAD [ 134.142205] audit: type=1300 audit(1784762471.821:523): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=627c0e02ff98 a2=98 a3=0 items=0 ppid=4468 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.148833] audit: type=1327 audit(1784762471.821:523): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265666333326533613330336138363162623264363235363431396438 [ 134.157113] audit: type=1334 audit(1784762471.823:524): prog-id=155 op=UNLOAD [ 134.159867] audit: type=1300 audit(1784762471.823:524): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4468 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.167888] audit: type=1327 audit(1784762471.823:524): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265666333326533613330336138363162623264363235363431396438 [ 134.179083] audit: type=1334 audit(1784762471.823:525): prog-id=154 op=UNLOAD [ 139.978192] kauditd_printk_skb: 21 callbacks suppressed [ 139.978197] audit: type=1334 audit(1784762477.675:533): prog-id=160 op=LOAD [ 139.983156] audit: type=1334 audit(1784762477.676:534): prog-id=161 op=LOAD [ 139.984983] audit: type=1300 audit(1784762477.676:534): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=48e60d73ff80 a2=98 a3=0 items=0 ppid=5147 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.992010] audit: type=1327 audit(1784762477.676:534): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333732383265656236636263623138666463343034313337306134 [ 140.002129] audit: type=1334 audit(1784762477.677:535): prog-id=161 op=UNLOAD [ 140.004623] audit: type=1300 audit(1784762477.677:535): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5147 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 140.010996] audit: type=1327 audit(1784762477.677:535): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333732383265656236636263623138666463343034313337306134 [ 140.016996] audit: type=1334 audit(1784762477.678:536): prog-id=162 op=LOAD [ 140.018508] audit: type=1300 audit(1784762477.678:536): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=48e60d740258 a2=98 a3=0 items=0 ppid=5147 pid=5158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 140.024584] audit: type=1327 audit(1784762477.678:536): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836333732383265656236636263623138666463343034313337306134 This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:19 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:19 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 ip-172-31-17-49 login: This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:20 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:20 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 ip-172-31-17-49 login: This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:21 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:21 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 ip-172-31-17-49 login: [ 145.088280] kauditd_printk_skb: 277 callbacks suppressed [ 145.088286] audit: type=1334 audit(1784762482.785:630): prog-id=208 op=LOAD [ 145.091981] audit: type=1334 audit(1784762482.788:631): prog-id=209 op=LOAD [ 145.093515] audit: type=1300 audit(1784762482.788:631): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5f3dfe637f80 a2=98 a3=0 items=0 ppid=5147 pid=5420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.099825] audit: type=1327 audit(1784762482.788:631): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636363732373364663138656334356238323835653464303338653862 [ 145.105811] audit: type=1334 audit(1784762482.789:632): prog-id=209 op=UNLOAD [ 145.107537] audit: type=1300 audit(1784762482.789:632): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5147 pid=5420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.113412] audit: type=1327 audit(1784762482.789:632): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636363732373364663138656334356238323835653464303338653862 [ 145.119732] audit: type=1334 audit(1784762482.789:633): prog-id=210 op=LOAD [ 145.122277] audit: type=1300 audit(1784762482.789:633): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=5f3dfe638258 a2=98 a3=0 items=0 ppid=5147 pid=5420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.129311] audit: type=1327 audit(1784762482.789:633): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636363732373364663138656334356238323835653464303338653862 [ 150.628453] kauditd_printk_skb: 74 callbacks suppressed [ 150.628459] audit: type=1325 audit(1784762488.325:660): table=filter:124 family=2 entries=15 op=nft_register_rule pid=5722 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.642713] audit: type=1300 audit(1784762488.325:660): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff6c8cc40 a2=0 a3=1 items=0 ppid=4100 pid=5722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.660888] audit: type=1327 audit(1784762488.325:660): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 150.666814] audit: type=1325 audit(1784762488.339:661): table=nat:125 family=2 entries=37 op=nft_register_chain pid=5722 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 150.673989] audit: type=1300 audit(1784762488.339:661): arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=fffff6c8cc40 a2=0 a3=1 items=0 ppid=4100 pid=5722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.686981] audit: type=1327 audit(1784762488.339:661): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 150.854770] audit: type=1325 audit(1784762488.547:662): table=filter:126 family=2 entries=46 op=nft_register_chain pid=5734 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 150.861260] audit: type=1300 audit(1784762488.547:662): arch=c00000b7 syscall=211 success=yes exit=23648 a0=3 a1=ffffe2e121f0 a2=0 a3=ffff840d67e0 items=0 ppid=5194 pid=5734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.872005] audit: type=1327 audit(1784762488.547:662): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 150.880837] audit: type=1334 audit(1784762488.577:663): prog-id=223 op=LOAD This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:28 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:28 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 ip-172-31-17-49 login: This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:30 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:30 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 ip-172-31-17-49 login: This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:31 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:31 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 ip-172-31-17-49 login: This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:32 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:32 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 ip-172-31-17-49 login: This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:33 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:33 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 ip-172-31-17-49 login: This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:34 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 This is ip-172-31-17-49 (Linux aarch64 6.12.96-flatcar) 23:21:34 SSH host key: SHA256:HDhuqVDXvBrmb8mL377huvETHk1X1zC1Ci4fNK/i28c (ECDSA) SSH host key: SHA256:s39xd/qoiqi6qXjkEbYHE19TakKcomlNWcgFeLZg4Q8 (ED25519) SSH host key: SHA256:y91XKc225lBM0PsZ3WyN9HYyMksyzq3h5H3vFehUU9U (RSA) eth0: 172.31.17.49 fe80::43a:5cff:fe3f:49b3 ip-172-31-17-49 login: [ 157.689516] kauditd_printk_skb: 207 callbacks suppressed [ 157.689522] audit: type=1334 audit(1784762495.386:737): prog-id=261 op=LOAD [ 157.693220] audit: type=1334 audit(1784762495.389:738): prog-id=262 op=LOAD [ 157.694791] audit: type=1300 audit(1784762495.389:738): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=62474592ff80 a2=98 a3=0 items=0 ppid=5757 pid=6214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 157.700813] audit: type=1327 audit(1784762495.389:738): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361333537313839653033316164303139323762323362383735633961 [ 157.707075] audit: type=1334 audit(1784762495.391:739): prog-id=262 op=UNLOAD [ 157.708902] audit: type=1300 audit(1784762495.391:739): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5757 pid=6214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 157.714939] audit: type=1327 audit(1784762495.391:739): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361333537313839653033316164303139323762323362383735633961 [ 157.721505] audit: type=1334 audit(1784762495.391:740): prog-id=263 op=LOAD [ 157.724817] audit: type=1300 audit(1784762495.391:740): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=624745930258 a2=98 a3=0 items=0 ppid=5757 pid=6214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 157.730913] audit: type=1327 audit(1784762495.391:740): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361333537313839653033316164303139323762323362383735633961 [ 166.716497] kauditd_printk_skb: 46 callbacks suppressed [ 166.716503] audit: type=1334 audit(1784762504.412:757): prog-id=271 op=LOAD [ 166.720228] audit: type=1334 audit(1784762504.416:758): prog-id=272 op=LOAD [ 166.722571] audit: type=1300 audit(1784762504.416:758): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7b5d87925f80 a2=98 a3=0 items=0 ppid=6019 pid=6380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.730312] audit: type=1327 audit(1784762504.416:758): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965663330363836653431383731373536393435346332646436386561 [ 166.740427] audit: type=1334 audit(1784762504.416:759): prog-id=272 op=UNLOAD [ 166.742820] audit: type=1300 audit(1784762504.416:759): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=6019 pid=6380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.750763] audit: type=1327 audit(1784762504.416:759): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965663330363836653431383731373536393435346332646436386561 [ 166.757989] audit: type=1334 audit(1784762504.418:760): prog-id=273 op=LOAD [ 166.760573] audit: type=1300 audit(1784762504.418:760): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7b5d87926258 a2=98 a3=0 items=0 ppid=6019 pid=6380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.768936] audit: type=1327 audit(1784762504.418:760): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965663330363836653431383731373536393435346332646436386561 [ 176.489224] kauditd_printk_skb: 61 callbacks suppressed [ 176.489230] audit: type=1325 audit(1784762514.184:782): table=filter:148 family=2 entries=10 op=nft_register_rule pid=6579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.494072] audit: type=1300 audit(1784762514.184:782): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe8ff6b90 a2=0 a3=1 items=0 ppid=4100 pid=6579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.500537] audit: type=1327 audit(1784762514.184:782): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 176.509989] audit: type=1325 audit(1784762514.205:783): table=nat:149 family=2 entries=36 op=nft_register_chain pid=6579 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 176.513987] audit: type=1300 audit(1784762514.205:783): arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffe8ff6b90 a2=0 a3=1 items=0 ppid=4100 pid=6579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.521151] audit: type=1327 audit(1784762514.205:783): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 178.647595] audit: type=1325 audit(1784762516.340:784): table=filter:150 family=2 entries=109 op=nft_register_chain pid=6588 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 178.652642] audit: type=1300 audit(1784762516.340:784): arch=c00000b7 syscall=211 success=yes exit=48476 a0=3 a1=ffffcca03460 a2=0 a3=ffffb14107e0 items=0 ppid=5194 pid=6588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.661261] audit: type=1327 audit(1784762516.340:784): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 179.709253] audit: type=1325 audit(1784762517.404:785): table=filter:151 family=2 entries=59 op=nft_register_chain pid=6598 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 181.599416] kauditd_printk_skb: 13 callbacks suppressed [ 181.599423] audit: type=1106 audit(1784762519.294:793): pid=6601 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.613862] audit: type=1104 audit(1784762519.295:794): pid=6601 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.623436] audit: type=1131 audit(1784762519.314:795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4100-172.31.17.49:22-20.103.240.199:34392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 186.789014] audit: type=1130 audit(1784762524.484:796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4101-172.31.17.49:22-20.103.240.199:38396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.744994] audit: type=1101 audit(1784762525.440:797): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.752384] audit: type=1103 audit(1784762525.447:798): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.758739] audit: type=1006 audit(1784762525.447:799): pid=6658 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 187.762217] audit: type=1300 audit(1784762525.447:799): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff464d650 a2=3 a3=0 items=0 ppid=1 pid=6658 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 187.768847] audit: type=1327 audit(1784762525.447:799): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 187.795490] audit: type=1105 audit(1784762525.491:800): pid=6658 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.804206] audit: type=1103 audit(1784762525.500:801): pid=6662 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.406847] audit: type=1106 audit(1784762526.102:802): pid=6658 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 188.413704] audit: type=1104 audit(1784762526.103:803): pid=6658 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 192.253878] kauditd_printk_skb: 1 callbacks suppressed [ 192.253883] audit: type=1325 audit(1784762529.949:805): table=filter:153 family=2 entries=9 op=nft_register_rule pid=6708 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.259467] audit: type=1300 audit(1784762529.949:805): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffe3126350 a2=0 a3=1 items=0 ppid=4100 pid=6708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.267106] audit: type=1327 audit(1784762529.949:805): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 192.273084] audit: type=1325 audit(1784762529.968:806): table=nat:154 family=2 entries=31 op=nft_register_chain pid=6708 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.276281] audit: type=1300 audit(1784762529.968:806): arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffe3126350 a2=0 a3=1 items=0 ppid=4100 pid=6708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.283102] audit: type=1327 audit(1784762529.968:806): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 193.574703] audit: type=1130 audit(1784762531.269:807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4102-172.31.17.49:22-20.103.240.199:44554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.302130] audit: type=1325 audit(1784762531.992:808): table=filter:155 family=2 entries=124 op=nft_register_chain pid=6720 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 194.307482] audit: type=1300 audit(1784762531.992:808): arch=c00000b7 syscall=211 success=yes exit=59176 a0=3 a1=ffffeabb4800 a2=0 a3=ffffa2ceb7e0 items=0 ppid=5194 pid=6720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.314786] audit: type=1327 audit(1784762531.992:808): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 200.269856] kauditd_printk_skb: 13 callbacks suppressed [ 200.269862] audit: type=1130 audit(1784762537.965:818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-5-172.31.17.49:22-20.103.240.199:44556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 201.167650] audit: type=1101 audit(1784762538.863:819): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 201.176019] audit: type=1103 audit(1784762538.871:820): pid=6831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 201.182874] audit: type=1006 audit(1784762538.871:821): pid=6831 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 201.186393] audit: type=1300 audit(1784762538.871:821): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff49dcaf0 a2=3 a3=0 items=0 ppid=1 pid=6831 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 201.193225] audit: type=1327 audit(1784762538.871:821): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 201.219262] audit: type=1105 audit(1784762538.914:822): pid=6831 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 201.227643] audit: type=1103 audit(1784762538.923:823): pid=6835 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 201.822000] audit: type=1106 audit(1784762539.516:824): pid=6831 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 201.836116] audit: type=1104 audit(1784762539.516:825): pid=6831 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 205.468357] kauditd_printk_skb: 20 callbacks suppressed [ 205.468363] audit: type=1106 audit(1784762543.164:842): pid=6884 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 205.477309] audit: type=1104 audit(1784762543.164:843): pid=6884 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 205.482815] audit: type=1131 audit(1784762543.177:844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-6-172.31.17.49:22-20.103.240.199:36364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 210.659850] audit: type=1130 audit(1784762548.356:845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-7-172.31.17.49:22-20.103.240.199:36372 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 211.618056] audit: type=1101 audit(1784762549.314:846): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 211.625138] audit: type=1103 audit(1784762549.322:847): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 211.630483] audit: type=1006 audit(1784762549.323:848): pid=6909 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 211.633692] audit: type=1300 audit(1784762549.323:848): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff52b64b0 a2=3 a3=0 items=0 ppid=1 pid=6909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.639833] audit: type=1327 audit(1784762549.323:848): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 211.670303] audit: type=1105 audit(1784762549.367:849): pid=6909 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 211.679127] audit: type=1103 audit(1784762549.376:850): pid=6913 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 212.268267] audit: type=1106 audit(1784762549.964:851): pid=6909 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 212.274741] audit: type=1104 audit(1784762549.964:852): pid=6909 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 216.188005] kauditd_printk_skb: 9 callbacks suppressed [ 216.188012] audit: type=1106 audit(1784762553.883:860): pid=6924 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 216.209231] audit: type=1104 audit(1784762553.883:861): pid=6924 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 216.218467] audit: type=1131 audit(1784762553.899:862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-4104-172.31.17.49:22-20.103.240.199:36384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.354116] audit: type=1130 audit(1784762554.051:863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4105-172.31.17.49:22-20.103.240.199:54900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 217.275728] audit: type=1101 audit(1784762554.972:864): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 217.286263] audit: type=1103 audit(1784762554.980:865): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 217.294914] audit: type=1006 audit(1784762554.981:866): pid=6947 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 217.298599] audit: type=1300 audit(1784762554.981:866): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd8183cf0 a2=3 a3=0 items=0 ppid=1 pid=6947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 217.311192] audit: type=1327 audit(1784762554.981:866): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 217.331219] audit: type=1105 audit(1784762555.028:867): pid=6947 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 221.218239] kauditd_printk_skb: 24 callbacks suppressed [ 221.218247] audit: type=1106 audit(1784762558.914:882): pid=6976 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 221.228081] audit: type=1104 audit(1784762558.914:883): pid=6976 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 221.234126] audit: type=1131 audit(1784762558.924:884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-8-172.31.17.49:22-20.103.240.199:54912 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 221.392572] audit: type=1130 audit(1784762559.088:885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-9-172.31.17.49:22-20.103.240.199:54918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 222.275661] audit: type=1101 audit(1784762559.972:886): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 222.287000] audit: type=1103 audit(1784762559.983:887): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 222.299539] audit: type=1006 audit(1784762559.983:888): pid=6993 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 222.308309] audit: type=1300 audit(1784762559.983:888): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc7ffe740 a2=3 a3=0 items=0 ppid=1 pid=6993 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 222.323073] audit: type=1327 audit(1784762559.983:888): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 222.340176] audit: type=1105 audit(1784762560.037:889): pid=6993 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.341549] kauditd_printk_skb: 4 callbacks suppressed [ 226.341554] audit: type=1325 audit(1784762564.038:894): table=filter:161 family=2 entries=20 op=nft_register_rule pid=7042 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 226.347558] audit: type=1300 audit(1784762564.038:894): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffd2f91b10 a2=0 a3=1 items=0 ppid=4100 pid=7042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.355439] audit: type=1327 audit(1784762564.038:894): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 226.367464] audit: type=1325 audit(1784762564.062:895): table=nat:162 family=2 entries=110 op=nft_register_chain pid=7042 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 226.371597] audit: type=1300 audit(1784762564.062:895): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffd2f91b10 a2=0 a3=1 items=0 ppid=4100 pid=7042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.378647] audit: type=1327 audit(1784762564.062:895): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 228.104896] audit: type=1130 audit(1784762565.801:896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4106-172.31.17.49:22-20.103.240.199:58822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 228.984262] audit: type=1101 audit(1784762566.681:897): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 228.991967] audit: type=1103 audit(1784762566.688:898): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 228.998812] audit: type=1006 audit(1784762566.689:899): pid=7092 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 234.808012] kauditd_printk_skb: 7 callbacks suppressed [ 234.808019] audit: type=1130 audit(1784762572.504:905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4107-172.31.17.49:22-20.103.240.199:47694 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 235.687472] audit: type=1101 audit(1784762573.384:906): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 235.695263] audit: type=1103 audit(1784762573.391:907): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 235.702584] audit: type=1006 audit(1784762573.391:908): pid=7143 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 235.706780] audit: type=1300 audit(1784762573.391:908): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffdfa40140 a2=3 a3=0 items=0 ppid=1 pid=7143 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 235.714987] audit: type=1327 audit(1784762573.391:908): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 235.744354] audit: type=1105 audit(1784762573.440:909): pid=7143 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 235.752782] audit: type=1103 audit(1784762573.449:910): pid=7147 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 236.294741] audit: type=1106 audit(1784762573.990:911): pid=7143 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 236.303168] audit: type=1104 audit(1784762573.990:912): pid=7143 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 241.469999] kauditd_printk_skb: 1 callbacks suppressed [ 241.470004] audit: type=1130 audit(1784762579.166:914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10-172.31.17.49:22-20.103.240.199:47708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 242.355668] audit: type=1101 audit(1784762580.052:915): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 242.364562] audit: type=1103 audit(1784762580.061:916): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 242.370424] audit: type=1006 audit(1784762580.066:917): pid=7197 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 242.375920] audit: type=1300 audit(1784762580.066:917): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd59b88b0 a2=3 a3=0 items=0 ppid=1 pid=7197 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 242.382730] audit: type=1327 audit(1784762580.066:917): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 242.405554] audit: type=1105 audit(1784762580.102:918): pid=7197 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 242.413679] audit: type=1103 audit(1784762580.110:919): pid=7201 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 242.982028] audit: type=1106 audit(1784762580.679:920): pid=7197 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 242.989691] audit: type=1104 audit(1784762580.679:921): pid=7197 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 248.177990] kauditd_printk_skb: 1 callbacks suppressed [ 248.177996] audit: type=1130 audit(1784762585.873:923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-11-172.31.17.49:22-20.103.240.199:50546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 249.109481] audit: type=1101 audit(1784762586.806:924): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 249.117308] audit: type=1103 audit(1784762586.814:925): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 249.122804] audit: type=1006 audit(1784762586.814:926): pid=7215 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 249.126595] audit: type=1300 audit(1784762586.814:926): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc241e370 a2=3 a3=0 items=0 ppid=1 pid=7215 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 249.133738] audit: type=1327 audit(1784762586.814:926): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 249.151512] audit: type=1105 audit(1784762586.848:927): pid=7215 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 249.159633] audit: type=1103 audit(1784762586.856:928): pid=7219 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 249.762680] audit: type=1106 audit(1784762587.459:929): pid=7215 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 249.770997] audit: type=1104 audit(1784762587.460:930): pid=7215 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success'