e=1300 audit(1784683540.438:386): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=faa906b2290 a2=98 a3=0 items=0 ppid=3960 pid=3971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 77.975421] audit: type=1327 audit(1784683540.438:386): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662333666356263316539363539366532646638303937353663366633 [ 90.215607] kauditd_printk_skb: 224 callbacks suppressed [ 90.215611] audit: type=1106 audit(1784683552.711:463): pid=2615 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 90.221753] audit: type=1104 audit(1784683552.714:464): pid=2615 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 90.392594] audit: type=1106 audit(1784683552.888:465): pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 90.399572] audit: type=1104 audit(1784683552.888:466): pid=2610 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 90.407551] audit: type=1131 audit(1784683552.903:467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4100-172.31.19.70:22-20.103.240.199:40326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 94.104809] audit: type=1325 audit(1784683556.599:468): table=filter:103 family=2 entries=15 op=nft_register_rule pid=4298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.110821] audit: type=1300 audit(1784683556.599:468): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd8b0f83e0 a2=0 a3=7ffd8b0f83cc items=0 ppid=4011 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.121805] audit: type=1327 audit(1784683556.599:468): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 94.127547] audit: type=1325 audit(1784683556.609:469): table=nat:104 family=2 entries=12 op=nft_register_rule pid=4298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 94.132550] audit: type=1300 audit(1784683556.609:469): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd8b0f83e0 a2=0 a3=0 items=0 ppid=4011 pid=4298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.004190] kauditd_printk_skb: 7 callbacks suppressed [ 96.004194] audit: type=1334 audit(1784683558.500:472): prog-id=130 op=LOAD [ 96.009662] audit: type=1334 audit(1784683558.503:473): prog-id=131 op=LOAD [ 96.013983] audit: type=1300 audit(1784683558.503:473): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=34df2d1c1fd8 a2=98 a3=0 items=0 ppid=4324 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.022209] audit: type=1327 audit(1784683558.503:473): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737306539313835633135353330636438303566353965306538613738 [ 96.031319] audit: type=1334 audit(1784683558.503:474): prog-id=131 op=UNLOAD [ 96.033586] audit: type=1300 audit(1784683558.503:474): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4324 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.042121] audit: type=1327 audit(1784683558.503:474): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737306539313835633135353330636438303566353965306538613738 [ 96.054766] audit: type=1334 audit(1784683558.505:475): prog-id=132 op=LOAD [ 96.058049] audit: type=1300 audit(1784683558.505:475): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=34df2d1c2290 a2=98 a3=0 items=0 ppid=4324 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 96.066141] audit: type=1327 audit(1784683558.505:475): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737306539313835633135353330636438303566353965306538613738 [ 102.764710] kauditd_printk_skb: 56 callbacks suppressed [ 102.764713] audit: type=1334 audit(1784683565.261:496): prog-id=143 op=LOAD [ 102.768354] audit: type=1334 audit(1784683565.264:497): prog-id=144 op=LOAD [ 102.769903] audit: type=1300 audit(1784683565.264:497): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1f6ebd431fd8 a2=98 a3=0 items=0 ppid=4324 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.775887] audit: type=1327 audit(1784683565.264:497): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639303664333962633336393530333465613439653532333034616434 [ 102.781900] audit: type=1334 audit(1784683565.264:498): prog-id=144 op=UNLOAD [ 102.783698] audit: type=1300 audit(1784683565.264:498): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4324 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.790065] audit: type=1327 audit(1784683565.264:498): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639303664333962633336393530333465613439653532333034616434 [ 102.796373] audit: type=1334 audit(1784683565.264:499): prog-id=145 op=LOAD [ 102.798039] audit: type=1300 audit(1784683565.264:499): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1f6ebd432290 a2=98 a3=0 items=0 ppid=4324 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 102.806712] audit: type=1327 audit(1784683565.264:499): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639303664333962633336393530333465613439653532333034616434 [ 112.868513] kauditd_printk_skb: 18 callbacks suppressed [ 112.868515] audit: type=1334 audit(1784683575.364:506): prog-id=148 op=LOAD [ 112.872452] audit: type=1300 audit(1784683575.364:506): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=11d30a49c290 a2=98 a3=0 items=0 ppid=4411 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.879911] audit: type=1327 audit(1784683575.364:506): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536336532643363346463363366373538333930333761653633323038 [ 112.886826] audit: type=1334 audit(1784683575.364:507): prog-id=149 op=LOAD [ 112.888681] audit: type=1300 audit(1784683575.364:507): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=11d30a49bfe8 a2=98 a3=0 items=0 ppid=4411 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.895281] audit: type=1327 audit(1784683575.364:507): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536336532643363346463363366373538333930333761653633323038 [ 112.900652] audit: type=1334 audit(1784683575.364:508): prog-id=149 op=UNLOAD [ 112.902887] audit: type=1300 audit(1784683575.364:508): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4411 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.908571] audit: type=1327 audit(1784683575.364:508): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536336532643363346463363366373538333930333761653633323038 [ 112.915051] audit: type=1334 audit(1784683575.366:509): prog-id=148 op=UNLOAD [ 118.945272] kauditd_printk_skb: 6 callbacks suppressed [ 118.945275] audit: type=1334 audit(1784683581.441:512): prog-id=151 op=LOAD [ 118.948864] audit: type=1300 audit(1784683581.441:512): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=2105b0d64290 a2=98 a3=0 items=0 ppid=4411 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.954978] audit: type=1327 audit(1784683581.441:512): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339643136326539353132396264316636323930623462613938633437 [ 118.960974] audit: type=1334 audit(1784683581.445:513): prog-id=152 op=LOAD [ 118.962537] audit: type=1300 audit(1784683581.445:513): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2105b0d63fe8 a2=98 a3=0 items=0 ppid=4411 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.968656] audit: type=1327 audit(1784683581.445:513): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339643136326539353132396264316636323930623462613938633437 [ 118.977923] audit: type=1334 audit(1784683581.445:514): prog-id=152 op=UNLOAD [ 118.981388] audit: type=1300 audit(1784683581.445:514): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4411 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.989241] audit: type=1327 audit(1784683581.445:514): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339643136326539353132396264316636323930623462613938633437 [ 118.995634] audit: type=1334 audit(1784683581.445:515): prog-id=151 op=UNLOAD [ 124.552472] kauditd_printk_skb: 21 callbacks suppressed [ 124.552476] audit: type=1334 audit(1784683587.048:523): prog-id=157 op=LOAD [ 124.556852] audit: type=1300 audit(1784683587.048:523): arch=c000003e syscall=321 success=yes exit=13 a0=5 a1=7fba0fffea10 a2=94 a3=58b190c items=0 ppid=5102 pid=5114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.573594] audit: type=1327 audit(1784683587.048:523): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 124.582219] audit: type=1334 audit(1784683587.052:524): prog-id=157 op=UNLOAD [ 124.585315] audit: type=1300 audit(1784683587.052:524): arch=c000003e syscall=3 success=yes exit=0 a0=d a1=2 a2=2 a3=58b190c items=0 ppid=5102 pid=5114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.594671] audit: type=1327 audit(1784683587.052:524): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 124.598490] audit: type=1334 audit(1784683587.052:525): prog-id=158 op=LOAD [ 124.602870] audit: type=1300 audit(1784683587.052:525): arch=c000003e syscall=321 success=yes exit=13 a0=5 a1=7fba0fffea40 a2=98 a3=2 items=0 ppid=5102 pid=5114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.610938] audit: type=1327 audit(1784683587.052:525): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 124.614948] audit: type=1334 audit(1784683587.052:526): prog-id=158 op=UNLOAD This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:29 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:29 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf ip-172-31-19-70 login: This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:30 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:30 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf ip-172-31-19-70 login: This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:31 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:31 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf ip-172-31-19-70 login: [ 130.759294] kauditd_printk_skb: 277 callbacks suppressed [ 130.759297] audit: type=1334 audit(1784683593.255:620): prog-id=205 op=LOAD [ 130.762702] audit: type=1334 audit(1784683593.258:621): prog-id=206 op=LOAD [ 130.764521] audit: type=1300 audit(1784683593.258:621): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=236243d31fd8 a2=98 a3=0 items=0 ppid=5235 pid=5411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.770685] audit: type=1327 audit(1784683593.258:621): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435613732333266303061376234353264613733663065656464653137 [ 130.776638] audit: type=1334 audit(1784683593.258:622): prog-id=206 op=UNLOAD [ 130.778422] audit: type=1300 audit(1784683593.258:622): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5235 pid=5411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.786353] audit: type=1327 audit(1784683593.258:622): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435613732333266303061376234353264613733663065656464653137 [ 130.792293] audit: type=1334 audit(1784683593.259:623): prog-id=207 op=LOAD [ 130.794225] audit: type=1300 audit(1784683593.259:623): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=236243d32290 a2=98 a3=0 items=0 ppid=5235 pid=5411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.800742] audit: type=1327 audit(1784683593.259:623): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435613732333266303061376234353264613733663065656464653137 [ 135.878133] kauditd_printk_skb: 102 callbacks suppressed [ 135.878141] audit: type=1334 audit(1784683598.374:660): prog-id=225 op=LOAD [ 135.881426] audit: type=1334 audit(1784683598.378:661): prog-id=226 op=LOAD [ 135.883040] audit: type=1300 audit(1784683598.378:661): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=329a8b1b9fd8 a2=98 a3=0 items=0 ppid=5613 pid=5719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.889092] audit: type=1327 audit(1784683598.378:661): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132326539336233643938616530313966306137336531643534363966 [ 135.894757] audit: type=1334 audit(1784683598.378:662): prog-id=226 op=UNLOAD [ 135.896515] audit: type=1300 audit(1784683598.378:662): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5613 pid=5719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.902822] audit: type=1327 audit(1784683598.378:662): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132326539336233643938616530313966306137336531643534363966 [ 135.908722] audit: type=1334 audit(1784683598.379:663): prog-id=227 op=LOAD [ 135.910739] audit: type=1300 audit(1784683598.379:663): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=329a8b1ba290 a2=98 a3=0 items=0 ppid=5613 pid=5719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 135.917064] audit: type=1327 audit(1784683598.379:663): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132326539336233643938616530313966306137336531643534363966 This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:39 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:39 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf ip-172-31-19-70 login: This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:40 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:40 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf ip-172-31-19-70 login: This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:41 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:41 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf ip-172-31-19-70 login: This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:42 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:42 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf ip-172-31-19-70 login: This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:43 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf This is ip-172-31-19-70 (Linux x86_64 6.12.96-flatcar) 01:26:43 SSH host key: SHA256:h+XV1C2BsUzENJTZJ6GAL8drkMLt9oT2Hk78Mv+GTS4 (ECDSA) SSH host key: SHA256:QyTif4tODqs+3eGN6f48MjDArNM1zLikUwjZjO7GG2s (ED25519) SSH host key: SHA256:GsTEDI6rX55ApMcIEFcSbfV/ecnyQO0ti7iVUouqk0c (RSA) eth0: 172.31.19.70 fe80::4ea:d1ff:fe85:caaf ip-172-31-19-70 login: [ 142.303063] kauditd_printk_skb: 192 callbacks suppressed [ 142.303067] audit: type=1334 audit(1784683604.799:732): prog-id=260 op=LOAD [ 142.305733] audit: type=1300 audit(1784683604.799:732): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=5e9c2232290 a2=98 a3=0 items=0 ppid=5672 pid=6215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.311025] audit: type=1327 audit(1784683604.799:732): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161623435326130313039653131313765376263383532316635323535 [ 142.316680] audit: type=1334 audit(1784683604.799:733): prog-id=261 op=LOAD [ 142.318728] audit: type=1300 audit(1784683604.799:733): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=5e9c2231fe8 a2=98 a3=0 items=0 ppid=5672 pid=6215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.324427] audit: type=1327 audit(1784683604.799:733): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161623435326130313039653131313765376263383532316635323535 [ 142.330557] audit: type=1334 audit(1784683604.799:734): prog-id=261 op=UNLOAD [ 142.332249] audit: type=1300 audit(1784683604.799:734): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5672 pid=6215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.338492] audit: type=1327 audit(1784683604.799:734): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161623435326130313039653131313765376263383532316635323535 [ 142.344477] audit: type=1334 audit(1784683604.799:735): prog-id=260 op=UNLOAD [ 147.662508] kauditd_printk_skb: 33 callbacks suppressed [ 147.662512] audit: type=1325 audit(1784683610.158:747): table=filter:142 family=2 entries=12 op=nft_register_rule pid=6340 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.667154] audit: type=1300 audit(1784683610.158:747): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe7ab8caa0 a2=0 a3=7ffe7ab8ca8c items=0 ppid=4011 pid=6340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.674121] audit: type=1327 audit(1784683610.158:747): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 147.677559] audit: type=1325 audit(1784683610.171:748): table=nat:143 family=2 entries=22 op=nft_register_rule pid=6340 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.681033] audit: type=1300 audit(1784683610.171:748): arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe7ab8caa0 a2=0 a3=7ffe7ab8ca8c items=0 ppid=4011 pid=6340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.688265] audit: type=1327 audit(1784683610.171:748): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 150.344370] audit: type=1130 audit(1784683612.840:749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4101-172.31.19.70:22-20.103.240.199:38558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 151.427281] audit: type=1101 audit(1784683613.923:750): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 151.441801] audit: type=1103 audit(1784683613.936:751): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 151.450879] audit: type=1006 audit(1784683613.936:752): pid=6405 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 153.095671] kauditd_printk_skb: 4 callbacks suppressed [ 153.095676] audit: type=1106 audit(1784683615.591:755): pid=6405 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 153.112019] audit: type=1104 audit(1784683615.594:756): pid=6405 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 153.139544] audit: type=1131 audit(1784683615.635:757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4101-172.31.19.70:22-20.103.240.199:38558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 153.893833] audit: type=1334 audit(1784683616.390:758): prog-id=268 op=LOAD [ 153.899475] audit: type=1334 audit(1784683616.395:759): prog-id=269 op=LOAD [ 153.902241] audit: type=1300 audit(1784683616.395:759): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=13bfcbf69fd8 a2=98 a3=0 items=0 ppid=6081 pid=6453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.908909] audit: type=1327 audit(1784683616.395:759): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235663465383763393930396231616536613061323231393837633564 [ 153.915415] audit: type=1334 audit(1784683616.398:760): prog-id=269 op=UNLOAD [ 153.917289] audit: type=1300 audit(1784683616.398:760): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=6081 pid=6453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.928368] audit: type=1327 audit(1784683616.398:760): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235663465383763393930396231616536613061323231393837633564 [ 158.304010] kauditd_printk_skb: 58 callbacks suppressed [ 158.304014] audit: type=1130 audit(1784683620.799:781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4-172.31.19.70:22-20.103.240.199:38560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 159.503107] audit: type=1101 audit(1784683621.999:782): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 159.530040] hrtimer: interrupt took 3243346 ns [ 159.544042] audit: type=1103 audit(1784683622.040:783): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 159.570868] audit: type=1006 audit(1784683622.040:784): pid=6640 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 159.576242] audit: type=1300 audit(1784683622.040:784): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdd8d669b0 a2=3 a3=0 items=0 ppid=1 pid=6640 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.589821] audit: type=1327 audit(1784683622.040:784): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 159.622911] audit: type=1105 audit(1784683622.118:785): pid=6640 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 159.649811] audit: type=1103 audit(1784683622.145:786): pid=6651 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 161.325157] audit: type=1325 audit(1784683623.821:787): table=filter:146 family=2 entries=11 op=nft_register_rule pid=6661 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 161.330244] audit: type=1300 audit(1784683623.821:787): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff67ef4a90 a2=0 a3=7fff67ef4a7c items=0 ppid=4011 pid=6661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.851713] kauditd_printk_skb: 7 callbacks suppressed [ 166.851716] audit: type=1130 audit(1784683629.347:792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-5-172.31.19.70:22-20.103.240.199:52374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 167.818715] audit: type=1101 audit(1784683630.314:793): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.838733] audit: type=1103 audit(1784683630.333:794): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.848019] audit: type=1006 audit(1784683630.333:795): pid=6677 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 167.854546] audit: type=1300 audit(1784683630.333:795): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd51048620 a2=3 a3=0 items=0 ppid=1 pid=6677 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 167.862821] audit: type=1327 audit(1784683630.333:795): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 167.887586] audit: type=1105 audit(1784683630.383:796): pid=6677 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 167.898405] audit: type=1103 audit(1784683630.394:797): pid=6681 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 168.860127] audit: type=1106 audit(1784683631.355:798): pid=6677 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 168.867842] audit: type=1104 audit(1784683631.363:799): pid=6677 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.021060] kauditd_printk_skb: 1 callbacks suppressed [ 174.021064] audit: type=1130 audit(1784683636.517:801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-6-172.31.19.70:22-20.103.240.199:43282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 174.934563] audit: type=1101 audit(1784683637.430:802): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.941946] audit: type=1103 audit(1784683637.432:803): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.948808] audit: type=1006 audit(1784683637.432:804): pid=6695 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 174.952479] audit: type=1300 audit(1784683637.432:804): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd49d87430 a2=3 a3=0 items=0 ppid=1 pid=6695 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.959013] audit: type=1327 audit(1784683637.432:804): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 174.974003] audit: type=1105 audit(1784683637.470:805): pid=6695 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 174.982139] audit: type=1103 audit(1784683637.478:806): pid=6718 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 175.560509] audit: type=1106 audit(1784683638.056:807): pid=6695 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 175.568283] audit: type=1104 audit(1784683638.056:808): pid=6695 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 179.359313] kauditd_printk_skb: 29 callbacks suppressed [ 179.359318] audit: type=1325 audit(1784683641.854:828): table=filter:151 family=2 entries=58 op=nft_register_chain pid=6794 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 179.368191] audit: type=1300 audit(1784683641.854:828): arch=c000003e syscall=46 success=yes exit=26468 a0=3 a1=7ffe2a361890 a2=0 a3=7ffe2a36187c items=0 ppid=5114 pid=6794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.380040] audit: type=1327 audit(1784683641.854:828): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 179.405226] audit: type=1106 audit(1784683641.901:829): pid=6746 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 179.417820] audit: type=1104 audit(1784683641.910:830): pid=6746 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 179.427831] audit: type=1131 audit(1784683641.922:831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-4102-172.31.19.70:22-20.103.240.199:43290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 179.587950] audit: type=1325 audit(1784683642.082:832): table=filter:152 family=2 entries=183 op=nft_register_chain pid=6807 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 179.593832] audit: type=1300 audit(1784683642.082:832): arch=c000003e syscall=46 success=yes exit=86420 a0=3 a1=7ffccaa56230 a2=0 a3=7ffccaa5621c items=0 ppid=5114 pid=6807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 179.601349] audit: type=1327 audit(1784683642.082:832): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 179.702891] audit: type=1325 audit(1784683642.196:833): table=filter:153 family=2 entries=251 op=nft_register_chain pid=6818 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 184.552471] kauditd_printk_skb: 8 callbacks suppressed [ 184.552477] audit: type=1130 audit(1784683647.048:836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4103-172.31.19.70:22-20.103.240.199:44740 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 185.548121] audit: type=1101 audit(1784683648.044:837): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 185.555279] audit: type=1103 audit(1784683648.051:838): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 185.561426] audit: type=1006 audit(1784683648.051:839): pid=6869 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 185.566274] audit: type=1300 audit(1784683648.051:839): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffce98ab110 a2=3 a3=0 items=0 ppid=1 pid=6869 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 185.573348] audit: type=1327 audit(1784683648.051:839): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 185.590304] audit: type=1105 audit(1784683648.086:840): pid=6869 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 185.598091] audit: type=1103 audit(1784683648.094:841): pid=6907 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.146021] audit: type=1106 audit(1784683649.642:842): pid=6869 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 187.153062] audit: type=1104 audit(1784683649.643:843): pid=6869 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 190.326148] kauditd_printk_skb: 13 callbacks suppressed [ 190.326152] audit: type=1101 audit(1784683652.822:855): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 190.335824] audit: type=1103 audit(1784683652.824:856): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 190.341809] audit: type=1006 audit(1784683652.824:857): pid=6933 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 190.345813] audit: type=1300 audit(1784683652.824:857): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffdb024140 a2=3 a3=0 items=0 ppid=1 pid=6933 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.354032] audit: type=1327 audit(1784683652.824:857): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 190.373104] audit: type=1105 audit(1784683652.869:858): pid=6933 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 190.381597] audit: type=1103 audit(1784683652.877:859): pid=6944 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 192.023802] audit: type=1325 audit(1784683654.516:860): table=filter:156 family=2 entries=8 op=nft_register_rule pid=6966 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 192.028498] audit: type=1300 audit(1784683654.516:860): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd81b13e00 a2=0 a3=7ffd81b13dec items=0 ppid=4011 pid=6966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 192.036172] audit: type=1327 audit(1784683654.516:860): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 196.013021] kauditd_printk_skb: 24 callbacks suppressed [ 196.013025] audit: type=1101 audit(1784683658.509:877): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.020678] audit: type=1103 audit(1784683658.516:878): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.026455] audit: type=1006 audit(1784683658.516:879): pid=6987 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 196.030173] audit: type=1300 audit(1784683658.516:879): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe564ac030 a2=3 a3=0 items=0 ppid=1 pid=6987 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.036381] audit: type=1327 audit(1784683658.516:879): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 196.053928] audit: type=1105 audit(1784683658.550:880): pid=6987 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.061731] audit: type=1103 audit(1784683658.557:881): pid=6991 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.642161] audit: type=1106 audit(1784683659.138:882): pid=6987 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.649387] audit: type=1104 audit(1784683659.138:883): pid=6987 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.655928] audit: type=1131 audit(1784683659.151:884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10-172.31.19.70:22-20.103.240.199:41424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 201.815296] kauditd_printk_skb: 6 callbacks suppressed [ 201.815300] audit: type=1130 audit(1784683664.311:887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-11-172.31.19.70:22-20.103.240.199:33616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 202.694547] audit: type=1101 audit(1784683665.190:888): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 202.701428] audit: type=1103 audit(1784683665.198:889): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 202.707444] audit: type=1006 audit(1784683665.198:890): pid=7014 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 202.711215] audit: type=1300 audit(1784683665.198:890): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc96d7ea00 a2=3 a3=0 items=0 ppid=1 pid=7014 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 202.717985] audit: type=1327 audit(1784683665.198:890): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 202.733880] audit: type=1105 audit(1784683665.230:891): pid=7014 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 202.741934] audit: type=1103 audit(1784683665.238:892): pid=7018 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 203.383184] audit: type=1106 audit(1784683665.879:893): pid=7014 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 203.390720] audit: type=1104 audit(1784683665.879:894): pid=7014 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 208.560791] kauditd_printk_skb: 1 callbacks suppressed [ 208.560795] audit: type=1130 audit(1784683671.056:896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4105-172.31.19.70:22-20.103.240.199:57346 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.664628] audit: type=1101 audit(1784683672.160:897): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 209.674879] audit: type=1103 audit(1784683672.171:898): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 209.681734] audit: type=1006 audit(1784683672.171:899): pid=7042 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 209.685270] audit: type=1300 audit(1784683672.171:899): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd8f0935a0 a2=3 a3=0 items=0 ppid=1 pid=7042 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.691972] audit: type=1327 audit(1784683672.171:899): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 209.721341] audit: type=1105 audit(1784683672.217:900): pid=7042 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 209.729549] audit: type=1103 audit(1784683672.225:901): pid=7068 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 211.182749] audit: type=1106 audit(1784683673.678:902): pid=7042 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 211.190170] audit: type=1104 audit(1784683673.678:903): pid=7042 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 216.363802] kauditd_printk_skb: 1 callbacks suppressed [ 216.363806] audit: type=1130 audit(1784683678.859:905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-12-172.31.19.70:22-20.103.240.199:57358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 217.325925] audit: type=1101 audit(1784683679.822:906): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 217.333168] audit: type=1103 audit(1784683679.829:907): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 217.340760] audit: type=1006 audit(1784683679.829:908): pid=7174 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 217.344479] audit: type=1300 audit(1784683679.829:908): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd927d6470 a2=3 a3=0 items=0 ppid=1 pid=7174 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 217.351015] audit: type=1327 audit(1784683679.829:908): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 217.365346] audit: type=1105 audit(1784683679.861:909): pid=7174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 217.373247] audit: type=1103 audit(1784683679.869:910): pid=7178 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 220.394953] audit: type=1106 audit(1784683682.891:911): pid=7174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 220.408008] audit: type=1104 audit(1784683682.892:912): pid=7174 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 225.532698] kauditd_printk_skb: 1 callbacks suppressed [ 225.532703] audit: type=1130 audit(1784683688.028:914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-13-172.31.19.70:22-20.103.240.199:36488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 226.451862] audit: type=1101 audit(1784683688.948:915): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.458464] audit: type=1103 audit(1784683688.949:916): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.465718] audit: type=1006 audit(1784683688.949:917): pid=7216 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 226.469531] audit: type=1300 audit(1784683688.949:917): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcb6fa6280 a2=3 a3=0 items=0 ppid=1 pid=7216 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.476103] audit: type=1327 audit(1784683688.949:917): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 226.494555] audit: type=1105 audit(1784683688.990:918): pid=7216 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.502340] audit: type=1103 audit(1784683688.998:919): pid=7220 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 227.114910] audit: type=1106 audit(1784683689.611:920): pid=7216 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 227.122055] audit: type=1104 audit(1784683689.611:921): pid=7216 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success'