grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.466562] audit: type=1104 audit(1788396076.910:170): pid=2672 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 41.469640] audit: type=1130 audit(1788396076.911:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.472551] audit: type=1131 audit(1788396076.911:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 41.619320] audit: type=1106 audit(1788396077.069:173): pid=2652 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 41.625445] audit: type=1104 audit(1788396077.069:174): pid=2652 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 41.630042] audit: type=1131 audit(1788396077.079:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-4100-172.31.18.78:22-20.61.25.254:34284 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 50.537570] Initializing XFRM netlink socket [ 50.695544] kauditd_printk_skb: 11 callbacks suppressed [ 50.695548] audit: type=1325 audit(1788396086.147:185): table=nat:2 family=2 entries=2 op=nft_register_chain pid=2780 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 50.699324] audit: type=1300 audit(1788396086.147:185): arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe18c05a60 a2=0 a3=0 items=0 ppid=2731 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 50.705334] audit: type=1327 audit(1788396086.147:185): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 [ 50.708221] audit: type=1325 audit(1788396086.153:186): table=filter:3 family=2 entries=2 op=nft_register_chain pid=2782 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 50.711389] audit: type=1300 audit(1788396086.153:186): arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdd136b530 a2=0 a3=0 items=0 ppid=2731 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 50.717707] audit: type=1327 audit(1788396086.153:186): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 [ 50.720697] audit: type=1325 audit(1788396086.157:187): table=filter:4 family=2 entries=1 op=nft_register_chain pid=2784 subj=system_u:system_r:kernel_t:s0 comm="iptables" [ 50.723568] audit: type=1300 audit(1788396086.157:187): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc7e2de280 a2=0 a3=0 items=0 ppid=2731 pid=2784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 50.729019] audit: type=1327 audit(1788396086.157:187): proctitle=2F7573722F62696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D464F5257415244 [ 50.731750] audit: type=1325 audit(1788396086.161:188): table=filter:5 family=2 entries=1 op=nft_register_chain pid=2786 subj=system_u:system_r:kernel_t:s0 comm="iptables" This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:41:27 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:41:27 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 ip-172-31-18-78 login: [ 58.393664] kauditd_printk_skb: 107 callbacks suppressed [ 58.393668] audit: type=1131 audit(1788396093.845:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 58.407346] audit: type=1334 audit(1788396093.859:227): prog-id=38 op=UNLOAD [ 62.238073] audit: type=1130 audit(1788396097.689:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 62.343584] audit: type=1131 audit(1788396097.795:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' [ 68.985336] audit: type=1130 audit(1788396104.437:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 68.992260] audit: type=1131 audit(1788396104.437:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 69.176781] zram_generator::config[3250]: No configuration found. [ 69.559549] audit: type=1334 audit(1788396105.012:232): prog-id=42 op=LOAD [ 69.560901] audit: type=1334 audit(1788396105.012:233): prog-id=26 op=UNLOAD [ 69.562704] audit: type=1334 audit(1788396105.012:234): prog-id=43 op=LOAD [ 69.564221] audit: type=1334 audit(1788396105.012:235): prog-id=44 op=LOAD [ 69.565778] audit: type=1334 audit(1788396105.012:236): prog-id=27 op=UNLOAD [ 69.567336] audit: type=1334 audit(1788396105.012:237): prog-id=28 op=UNLOAD [ 69.568766] audit: type=1334 audit(1788396105.012:238): prog-id=45 op=LOAD [ 69.570319] audit: type=1334 audit(1788396105.012:239): prog-id=29 op=UNLOAD [ 77.622031] zram_generator::config[3918]: No configuration found. [ 77.987131] kauditd_printk_skb: 202 callbacks suppressed [ 77.987135] audit: type=1334 audit(1788396113.438:334): prog-id=92 op=LOAD [ 77.990001] audit: type=1334 audit(1788396113.438:335): prog-id=42 op=UNLOAD [ 77.991768] audit: type=1334 audit(1788396113.438:336): prog-id=93 op=LOAD [ 77.993358] audit: type=1334 audit(1788396113.438:337): prog-id=94 op=LOAD [ 77.994728] audit: type=1334 audit(1788396113.438:338): prog-id=43 op=UNLOAD [ 77.996249] audit: type=1334 audit(1788396113.438:339): prog-id=44 op=UNLOAD [ 77.997786] audit: type=1334 audit(1788396113.439:340): prog-id=95 op=LOAD [ 77.999329] audit: type=1334 audit(1788396113.439:341): prog-id=45 op=UNLOAD [ 78.001752] audit: type=1334 audit(1788396113.439:342): prog-id=96 op=LOAD [ 78.003102] audit: type=1334 audit(1788396113.439:343): prog-id=97 op=LOAD [ 85.469897] kauditd_printk_skb: 44 callbacks suppressed [ 85.469902] audit: type=1334 audit(1788396120.921:388): prog-id=118 op=LOAD [ 85.473230] audit: type=1334 audit(1788396120.924:389): prog-id=119 op=LOAD [ 85.474746] audit: type=1300 audit(1788396120.924:389): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=17da87331fd8 a2=98 a3=0 items=0 ppid=4035 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.479677] audit: type=1327 audit(1788396120.924:389): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661366163666562616561333831653738313165633631303839613461 [ 85.484849] audit: type=1334 audit(1788396120.924:390): prog-id=119 op=UNLOAD [ 85.486142] audit: type=1300 audit(1788396120.924:390): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4035 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.491539] audit: type=1327 audit(1788396120.924:390): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661366163666562616561333831653738313165633631303839613461 [ 85.496990] audit: type=1334 audit(1788396120.924:391): prog-id=120 op=LOAD [ 85.498531] audit: type=1300 audit(1788396120.924:391): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=17da87332290 a2=98 a3=0 items=0 ppid=4035 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.504182] audit: type=1327 audit(1788396120.924:391): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661366163666562616561333831653738313165633631303839613461 [ 94.156845] kauditd_printk_skb: 202 callbacks suppressed [ 94.156849] audit: type=1334 audit(1788396129.608:460): prog-id=131 op=LOAD [ 94.160282] audit: type=1334 audit(1788396129.611:461): prog-id=132 op=LOAD [ 94.161500] audit: type=1300 audit(1788396129.611:461): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=254c799b1fd8 a2=98 a3=0 items=0 ppid=4035 pid=4293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.168239] audit: type=1327 audit(1788396129.611:461): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638353165666437633431393464646331666461343033646665326535 [ 94.174057] audit: type=1334 audit(1788396129.611:462): prog-id=132 op=UNLOAD [ 94.175520] audit: type=1300 audit(1788396129.611:462): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4035 pid=4293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.181341] audit: type=1327 audit(1788396129.611:462): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638353165666437633431393464646331666461343033646665326535 [ 94.190051] audit: type=1334 audit(1788396129.611:463): prog-id=133 op=LOAD [ 94.193685] audit: type=1300 audit(1788396129.611:463): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=254c799b2290 a2=98 a3=0 items=0 ppid=4035 pid=4293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 94.199879] audit: type=1327 audit(1788396129.611:463): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638353165666437633431393464646331666461343033646665326535 [ 101.705087] kauditd_printk_skb: 12 callbacks suppressed [ 101.705091] audit: type=1106 audit(1788396137.156:468): pid=2711 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 101.711865] audit: type=1104 audit(1788396137.156:469): pid=2711 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 101.871036] audit: type=1106 audit(1788396137.322:470): pid=2706 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 101.879296] audit: type=1104 audit(1788396137.322:471): pid=2706 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 101.890274] audit: type=1131 audit(1788396137.325:472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4101-172.31.18.78:22-20.61.25.254:35732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 105.673070] audit: type=1325 audit(1788396141.124:473): table=filter:103 family=2 entries=15 op=nft_register_rule pid=4373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 105.678281] audit: type=1300 audit(1788396141.124:473): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe6a7ddee0 a2=0 a3=7ffe6a7ddecc items=0 ppid=4133 pid=4373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.687280] audit: type=1327 audit(1788396141.124:473): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 105.691193] audit: type=1325 audit(1788396141.138:474): table=nat:104 family=2 entries=12 op=nft_register_rule pid=4373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 105.700224] audit: type=1300 audit(1788396141.138:474): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe6a7ddee0 a2=0 a3=0 items=0 ppid=4133 pid=4373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.729991] kauditd_printk_skb: 1 callbacks suppressed [ 106.729996] audit: type=1325 audit(1788396142.181:475): table=filter:105 family=2 entries=19 op=nft_register_rule pid=4378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.737577] audit: type=1300 audit(1788396142.181:475): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffea41c950 a2=0 a3=7fffea41c93c items=0 ppid=4133 pid=4378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.746758] audit: type=1327 audit(1788396142.181:475): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 106.749887] audit: type=1325 audit(1788396142.192:476): table=nat:106 family=2 entries=12 op=nft_register_rule pid=4378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.753542] audit: type=1300 audit(1788396142.192:476): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffea41c950 a2=0 a3=0 items=0 ppid=4133 pid=4378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.763228] audit: type=1327 audit(1788396142.192:476): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 106.907164] audit: type=1334 audit(1788396142.358:477): prog-id=136 op=LOAD [ 106.909916] audit: type=1334 audit(1788396142.361:478): prog-id=137 op=LOAD [ 106.912879] audit: type=1300 audit(1788396142.361:478): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2ecaf1b41fd8 a2=98 a3=0 items=0 ppid=4387 pid=4398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.923642] audit: type=1327 audit(1788396142.361:478): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336663139343936663137616666656531393437313666383939656333 [ 112.173012] kauditd_printk_skb: 62 callbacks suppressed [ 112.173016] audit: type=1334 audit(1788396147.624:501): prog-id=151 op=LOAD [ 112.176515] audit: type=1300 audit(1788396147.624:501): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=27679f3aa290 a2=98 a3=0 items=0 ppid=4478 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.185267] audit: type=1327 audit(1788396147.624:501): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161616261323036643366386164356134333934653263393739353761 [ 112.191080] audit: type=1334 audit(1788396147.628:502): prog-id=152 op=LOAD [ 112.192529] audit: type=1300 audit(1788396147.628:502): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=27679f3a9fe8 a2=98 a3=0 items=0 ppid=4478 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.198724] audit: type=1327 audit(1788396147.628:502): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161616261323036643366386164356134333934653263393739353761 [ 112.206589] audit: type=1334 audit(1788396147.628:503): prog-id=152 op=UNLOAD [ 112.211223] audit: type=1300 audit(1788396147.628:503): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4478 pid=4658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 112.227730] audit: type=1327 audit(1788396147.628:503): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161616261323036643366386164356134333934653263393739353761 [ 112.241313] audit: type=1334 audit(1788396147.628:504): prog-id=151 op=UNLOAD [ 118.892104] kauditd_printk_skb: 12 callbacks suppressed [ 118.892108] audit: type=1130 audit(1788396154.343:509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4102-172.31.18.78:22-102.178.147.96:42290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 119.032664] audit: type=1131 audit(1788396154.484:510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4102-172.31.18.78:22-102.178.147.96:42290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 119.661797] audit: type=1334 audit(1788396155.113:511): prog-id=154 op=LOAD [ 119.663387] audit: type=1300 audit(1788396155.113:511): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=24d1f17a0290 a2=98 a3=0 items=0 ppid=4478 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.669385] audit: type=1327 audit(1788396155.113:511): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623261343732663965393738343232616261376362366366303563 [ 119.675608] audit: type=1334 audit(1788396155.113:512): prog-id=155 op=LOAD [ 119.677243] audit: type=1300 audit(1788396155.113:512): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=24d1f179ffe8 a2=98 a3=0 items=0 ppid=4478 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.683494] audit: type=1327 audit(1788396155.113:512): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163623261343732663965393738343232616261376362366366303563 [ 119.689059] audit: type=1334 audit(1788396155.113:513): prog-id=155 op=UNLOAD [ 119.690772] audit: type=1300 audit(1788396155.113:513): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4478 pid=4721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.036660] kauditd_printk_skb: 23 callbacks suppressed [ 125.036664] audit: type=1334 audit(1788396160.488:522): prog-id=159 op=UNLOAD [ 126.260814] audit: type=1334 audit(1788396161.712:523): prog-id=160 op=LOAD [ 126.262572] audit: type=1300 audit(1788396161.712:523): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=3d36c8ab2290 a2=98 a3=0 items=0 ppid=4478 pid=5018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.268652] audit: type=1327 audit(1788396161.712:523): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366330613764656433353337376333313331616665626430333330 [ 126.277079] audit: type=1334 audit(1788396161.712:524): prog-id=161 op=LOAD [ 126.278833] audit: type=1300 audit(1788396161.712:524): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3d36c8ab1fe8 a2=98 a3=0 items=0 ppid=4478 pid=5018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.286172] audit: type=1327 audit(1788396161.712:524): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366330613764656433353337376333313331616665626430333330 [ 126.292051] audit: type=1334 audit(1788396161.712:525): prog-id=161 op=UNLOAD [ 126.293429] audit: type=1300 audit(1788396161.712:525): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4478 pid=5018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 126.300076] audit: type=1327 audit(1788396161.712:525): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530366330613764656433353337376333313331616665626430333330 [ 130.042158] kauditd_printk_skb: 73 callbacks suppressed [ 130.042163] audit: type=1334 audit(1788396165.493:551): prog-id=175 op=UNLOAD [ 130.049600] audit: type=1300 audit(1788396165.493:551): arch=c000003e syscall=3 success=yes exit=0 a0=22 a1=2 a2=2 a3=0 items=0 ppid=5160 pid=5170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.069572] audit: type=1327 audit(1788396165.493:551): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 130.078895] audit: type=1334 audit(1788396165.511:552): prog-id=176 op=LOAD [ 130.085027] audit: type=1300 audit(1788396165.511:552): arch=c000003e syscall=321 success=yes exit=13 a0=5 a1=7f75f77fda40 a2=98 a3=2 items=0 ppid=5160 pid=5170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.111279] audit: type=1327 audit(1788396165.511:552): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 130.123271] audit: type=1334 audit(1788396165.511:553): prog-id=176 op=UNLOAD [ 130.132167] audit: type=1300 audit(1788396165.511:553): arch=c000003e syscall=3 success=yes exit=0 a0=d a1=2 a2=2 a3=2 items=0 ppid=5160 pid=5170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.138307] audit: type=1327 audit(1788396165.511:553): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 130.219378] audit: type=1334 audit(1788396165.671:554): prog-id=177 op=LOAD This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:47 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:47 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 ip-172-31-18-78 login: This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:48 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:48 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 ip-172-31-18-78 login: This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:49 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:49 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 ip-172-31-18-78 login: [ 138.378087] kauditd_printk_skb: 238 callbacks suppressed [ 138.378091] audit: type=1325 audit(1788396173.826:635): table=filter:116 family=2 entries=42 op=nft_register_chain pid=5559 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 138.387273] audit: type=1300 audit(1788396173.826:635): arch=c000003e syscall=46 success=yes exit=22584 a0=3 a1=7ffd8bf9e360 a2=0 a3=7ffd8bf9e34c items=0 ppid=5170 pid=5559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.396371] audit: type=1327 audit(1788396173.826:635): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 138.458798] audit: type=1325 audit(1788396173.910:636): table=calico-arp:117 family=3 entries=3 op=nft_register_chain pid=5589 subj=system_u:system_r:kernel_t:s0 comm="nft" [ 138.468442] audit: type=1300 audit(1788396173.910:636): arch=c000003e syscall=46 success=yes exit=732 a0=3 a1=7fff066ba530 a2=0 a3=7f3848dc6c88 items=0 ppid=5170 pid=5589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nft" exe="/usr/sbin/nft" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.482265] audit: type=1327 audit(1788396173.910:636): proctitle=2F7573722F7362696E2F6E6674002D66002D [ 138.545386] audit: type=1334 audit(1788396173.997:637): prog-id=216 op=LOAD [ 138.546883] audit: type=1334 audit(1788396173.997:638): prog-id=217 op=LOAD [ 138.549626] audit: type=1300 audit(1788396173.997:638): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=9e362c8dfd8 a2=98 a3=0 items=0 ppid=5568 pid=5579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.559255] audit: type=1327 audit(1788396173.997:638): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393139323630356264663333323461333862393466366137303930 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:56 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:56 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 ip-172-31-18-78 login: This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:57 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:57 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 ip-172-31-18-78 login: This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:58 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:58 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 ip-172-31-18-78 login: [ 143.680611] kauditd_printk_skb: 248 callbacks suppressed [ 143.680615] audit: type=1325 audit(1788396179.132:727): table=filter:136 family=2 entries=12 op=nft_register_rule pid=6209 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 143.685293] audit: type=1300 audit(1788396179.132:727): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe3ca14530 a2=0 a3=7ffe3ca1451c items=0 ppid=4133 pid=6209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.692845] audit: type=1327 audit(1788396179.132:727): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 143.722556] audit: type=1325 audit(1788396179.173:728): table=nat:137 family=2 entries=58 op=nft_register_chain pid=6209 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 143.726042] audit: type=1300 audit(1788396179.173:728): arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffe3ca14530 a2=0 a3=7ffe3ca1451c items=0 ppid=4133 pid=6209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.732596] audit: type=1327 audit(1788396179.173:728): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:59 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:42:59 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 ip-172-31-18-78 login: [ 144.267262] audit: type=1334 audit(1788396179.718:729): prog-id=261 op=LOAD [ 144.269586] audit: type=1334 audit(1788396179.719:730): prog-id=262 op=LOAD [ 144.272285] audit: type=1300 audit(1788396179.719:730): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=18b951739fd8 a2=98 a3=0 items=0 ppid=5618 pid=6215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 144.278134] audit: type=1327 audit(1788396179.719:730): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261653937613033386166643833346637653137323836393735356662 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:43:00 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 This is ip-172-31-18-78 (Linux x86_64 6.12.105-flatcar) 00:43:00 SSH host key: SHA256:4/c/YvSgpJHkF9t1Xfn0u+HH4GkvxxBzB8MrEgTQvec (MLDSA44-ED25519) SSH host key: SHA256:SlAyvs2ehgQSSyKDS1XRP3/sf/XbZX0eD1bug8l9kg8 (ED25519) SSH host key: SHA256:ty8I7OxpgqqVu9Y16RL2MGZPKXi9Vm6bia2u99kLfa8 (RSA) SSH host key: SHA256:KUPYMqLrWnk+VkEb1qUMkp1Kp18Di4zXjYPBLWejzz0 (ECDSA) eth0: 172.31.18.78 fe80::477:c5ff:fec3:2c33 ip-172-31-18-78 login: [ 149.209899] kauditd_printk_skb: 52 callbacks suppressed [ 149.209903] audit: type=1334 audit(1788396184.661:749): prog-id=271 op=LOAD [ 149.213264] audit: type=1334 audit(1788396184.664:750): prog-id=272 op=LOAD [ 149.214952] audit: type=1300 audit(1788396184.664:750): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=38f9aba9fd8 a2=98 a3=0 items=0 ppid=5857 pid=6309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.224252] audit: type=1327 audit(1788396184.664:750): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063646638343632626563613732396464306263326535393566363830 [ 149.234271] audit: type=1334 audit(1788396184.664:751): prog-id=272 op=UNLOAD [ 149.236670] audit: type=1300 audit(1788396184.664:751): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5857 pid=6309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.245360] audit: type=1327 audit(1788396184.664:751): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063646638343632626563613732396464306263326535393566363830 [ 149.253289] audit: type=1334 audit(1788396184.664:752): prog-id=273 op=LOAD [ 149.254759] audit: type=1300 audit(1788396184.664:752): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=38f9abaa290 a2=98 a3=0 items=0 ppid=5857 pid=6309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.263288] audit: type=1327 audit(1788396184.664:752): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063646638343632626563613732396464306263326535393566363830 [ 155.392621] kauditd_printk_skb: 40 callbacks suppressed [ 155.392625] audit: type=1334 audit(1788396190.844:767): prog-id=281 op=LOAD [ 155.395517] audit: type=1300 audit(1788396190.844:767): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=233641f66290 a2=98 a3=0 items=0 ppid=6148 pid=6509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.401225] audit: type=1327 audit(1788396190.844:767): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736396130363630313638613963656462396539386361656638393634 [ 155.407164] audit: type=1334 audit(1788396190.844:768): prog-id=282 op=LOAD [ 155.409107] audit: type=1300 audit(1788396190.844:768): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=233641f65fe8 a2=98 a3=0 items=0 ppid=6148 pid=6509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.415305] audit: type=1327 audit(1788396190.844:768): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736396130363630313638613963656462396539386361656638393634 [ 155.421461] audit: type=1334 audit(1788396190.844:769): prog-id=282 op=UNLOAD [ 155.422960] audit: type=1300 audit(1788396190.844:769): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6148 pid=6509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 155.428973] audit: type=1327 audit(1788396190.844:769): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736396130363630313638613963656462396539386361656638393634 [ 155.434948] audit: type=1334 audit(1788396190.844:770): prog-id=281 op=UNLOAD [ 160.605224] kauditd_printk_skb: 20 callbacks suppressed [ 160.605228] audit: type=1130 audit(1788396196.056:777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-3-172.31.18.78:22-20.61.25.254:35778 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 161.557329] audit: type=1101 audit(1788396197.009:778): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 161.563735] audit: type=1103 audit(1788396197.011:779): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 161.570767] audit: type=1006 audit(1788396197.011:780): pid=6605 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 161.574111] audit: type=1300 audit(1788396197.011:780): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe699eb390 a2=3 a3=0 items=0 ppid=1 pid=6605 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.579581] audit: type=1327 audit(1788396197.011:780): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 161.605223] audit: type=1105 audit(1788396197.056:781): pid=6605 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 161.617420] audit: type=1103 audit(1788396197.068:782): pid=6609 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 162.811800] audit: type=1106 audit(1788396198.261:783): pid=6605 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 162.818866] audit: type=1104 audit(1788396198.262:784): pid=6605 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 167.976622] kauditd_printk_skb: 1 callbacks suppressed [ 167.976627] audit: type=1130 audit(1788396203.428:786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4103-172.31.18.78:22-20.61.25.254:35792 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 168.846269] audit: type=1101 audit(1788396204.297:787): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 168.853170] audit: type=1103 audit(1788396204.300:788): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 168.859547] audit: type=1006 audit(1788396204.300:789): pid=6630 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 168.862756] audit: type=1300 audit(1788396204.300:789): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd729cf300 a2=3 a3=0 items=0 ppid=1 pid=6630 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 168.868943] audit: type=1327 audit(1788396204.300:789): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 168.877931] audit: type=1105 audit(1788396204.329:790): pid=6630 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 168.885303] audit: type=1103 audit(1788396204.337:791): pid=6635 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 169.470259] audit: type=1106 audit(1788396204.921:792): pid=6630 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 169.484270] audit: type=1104 audit(1788396204.921:793): pid=6630 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 174.542647] kauditd_printk_skb: 13 callbacks suppressed [ 174.542651] audit: type=1325 audit(1788396209.989:799): table=filter:148 family=2 entries=109 op=nft_register_chain pid=6691 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 174.550754] audit: type=1300 audit(1788396209.989:799): arch=c000003e syscall=46 success=yes exit=48476 a0=3 a1=7ffc07444ce0 a2=0 a3=7ffc07444ccc items=0 ppid=5170 pid=6691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 174.560430] audit: type=1327 audit(1788396209.989:799): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 174.643245] audit: type=1130 audit(1788396210.094:800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4-172.31.18.78:22-20.61.25.254:46780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.663540] audit: type=1101 audit(1788396211.115:801): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 175.669594] audit: type=1103 audit(1788396211.117:802): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 175.675814] audit: type=1006 audit(1788396211.117:803): pid=6694 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 175.679215] audit: type=1300 audit(1788396211.117:803): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc25462c90 a2=3 a3=0 items=0 ppid=1 pid=6694 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.685200] audit: type=1327 audit(1788396211.117:803): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 175.692522] audit: type=1105 audit(1788396211.144:804): pid=6694 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 181.538439] kauditd_printk_skb: 4 callbacks suppressed [ 181.538443] audit: type=1130 audit(1788396216.990:809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-5-172.31.18.78:22-20.61.25.254:58722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.051098] audit: type=1325 audit(1788396217.502:810): table=filter:149 family=2 entries=9 op=nft_register_rule pid=6799 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 182.054294] audit: type=1300 audit(1788396217.502:810): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe123b0170 a2=0 a3=7ffe123b015c items=0 ppid=4133 pid=6799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.060972] audit: type=1327 audit(1788396217.502:810): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 182.063793] audit: type=1325 audit(1788396217.508:811): table=nat:150 family=2 entries=31 op=nft_register_chain pid=6799 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 182.067150] audit: type=1300 audit(1788396217.508:811): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffe123b0170 a2=0 a3=7ffe123b015c items=0 ppid=4133 pid=6799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.073155] audit: type=1327 audit(1788396217.508:811): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 182.420504] audit: type=1101 audit(1788396217.872:812): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 182.427685] audit: type=1103 audit(1788396217.875:813): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 182.433792] audit: type=1006 audit(1788396217.875:814): pid=6745 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 186.992560] kauditd_printk_skb: 29 callbacks suppressed [ 186.992565] audit: type=1106 audit(1788396222.444:836): pid=6872 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 187.001748] audit: type=1104 audit(1788396222.453:837): pid=6872 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 187.009036] audit: type=1131 audit(1788396222.459:838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-6-172.31.18.78:22-20.61.25.254:58738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.275963] audit: type=1325 audit(1788396225.726:839): table=filter:152 family=2 entries=124 op=nft_register_chain pid=6927 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 190.279500] audit: type=1300 audit(1788396225.726:839): arch=c000003e syscall=46 success=yes exit=59176 a0=3 a1=7ffc3740b090 a2=0 a3=7ffc3740b07c items=0 ppid=5170 pid=6927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.286571] audit: type=1327 audit(1788396225.726:839): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 190.440710] audit: type=1325 audit(1788396225.890:840): table=filter:153 family=2 entries=251 op=nft_register_chain pid=6945 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 190.444152] audit: type=1300 audit(1788396225.890:840): arch=c000003e syscall=46 success=yes exit=107960 a0=3 a1=7ffea5d92490 a2=0 a3=7ffea5d9247c items=0 ppid=5170 pid=6945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.451032] audit: type=1327 audit(1788396225.890:840): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 192.153276] audit: type=1130 audit(1788396227.605:841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-4105-172.31.18.78:22-20.61.25.254:38192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 193.079386] audit: type=1101 audit(1788396228.531:842): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 193.085699] audit: type=1103 audit(1788396228.532:843): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 193.091418] audit: type=1006 audit(1788396228.532:844): pid=6947 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 193.094661] audit: type=1300 audit(1788396228.532:844): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdb6101050 a2=3 a3=0 items=0 ppid=1 pid=6947 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 193.100789] audit: type=1327 audit(1788396228.532:844): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 193.110300] audit: type=1105 audit(1788396228.562:845): pid=6947 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 193.118470] audit: type=1103 audit(1788396228.570:846): pid=6951 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 194.114616] audit: type=1106 audit(1788396229.566:847): pid=6947 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 194.120743] audit: type=1104 audit(1788396229.568:848): pid=6947 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 197.203501] kauditd_printk_skb: 13 callbacks suppressed [ 197.203505] audit: type=1101 audit(1788396232.655:860): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 197.210852] audit: type=1103 audit(1788396232.657:861): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 197.216609] audit: type=1006 audit(1788396232.657:862): pid=6983 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 197.219893] audit: type=1300 audit(1788396232.657:862): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffeb0faf280 a2=3 a3=0 items=0 ppid=1 pid=6983 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 197.225915] audit: type=1327 audit(1788396232.657:862): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 197.234063] audit: type=1105 audit(1788396232.685:863): pid=6983 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 197.240526] audit: type=1103 audit(1788396232.688:864): pid=6987 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 198.295768] audit: type=1325 audit(1788396233.747:865): table=filter:154 family=2 entries=8 op=nft_register_rule pid=7008 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 198.299734] audit: type=1300 audit(1788396233.747:865): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc315adf60 a2=0 a3=7ffc315adf4c items=0 ppid=4133 pid=7008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.307994] audit: type=1327 audit(1788396233.747:865): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 202.685389] kauditd_printk_skb: 31 callbacks suppressed [ 202.685392] audit: type=1106 audit(1788396238.137:887): pid=7039 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 202.695920] audit: type=1104 audit(1788396238.137:888): pid=7039 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 202.701327] audit: type=1131 audit(1788396238.141:889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-8-172.31.18.78:22-20.61.25.254:52646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.458643] audit: type=1325 audit(1788396240.910:890): table=filter:158 family=2 entries=20 op=nft_register_rule pid=7056 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 205.461765] audit: type=1300 audit(1788396240.910:890): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd5c65d550 a2=0 a3=7ffd5c65d53c items=0 ppid=4133 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.468196] audit: type=1327 audit(1788396240.910:890): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 205.473958] audit: type=1325 audit(1788396240.924:891): table=nat:159 family=2 entries=110 op=nft_register_chain pid=7056 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 205.477150] audit: type=1300 audit(1788396240.924:891): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffd5c65d550 a2=0 a3=7ffd5c65d53c items=0 ppid=4133 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.483825] audit: type=1327 audit(1788396240.924:891): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 207.855167] audit: type=1130 audit(1788396243.306:892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-9-172.31.18.78:22-20.61.25.254:52652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 208.704120] audit: type=1101 audit(1788396244.155:893): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 208.709831] audit: type=1103 audit(1788396244.159:894): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 208.716019] audit: type=1006 audit(1788396244.159:895): pid=7060 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 208.720370] audit: type=1300 audit(1788396244.159:895): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd45d0d120 a2=3 a3=0 items=0 ppid=1 pid=7060 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 208.726478] audit: type=1327 audit(1788396244.159:895): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 208.734800] audit: type=1105 audit(1788396244.186:896): pid=7060 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 208.741890] audit: type=1103 audit(1788396244.189:897): pid=7064 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 209.397012] audit: type=1106 audit(1788396244.848:898): pid=7060 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 209.404481] audit: type=1104 audit(1788396244.849:899): pid=7060 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 214.561229] kauditd_printk_skb: 1 callbacks suppressed [ 214.561234] audit: type=1130 audit(1788396250.012:901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4108-172.31.18.78:22-20.61.25.254:46326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 215.496747] audit: type=1101 audit(1788396250.948:902): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 215.502882] audit: type=1103 audit(1788396250.951:903): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 215.508979] audit: type=1006 audit(1788396250.951:904): pid=7148 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 215.512313] audit: type=1300 audit(1788396250.951:904): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd4f6fac30 a2=3 a3=0 items=0 ppid=1 pid=7148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 215.518496] audit: type=1327 audit(1788396250.951:904): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 215.527087] audit: type=1105 audit(1788396250.978:905): pid=7148 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 215.534714] audit: type=1103 audit(1788396250.986:906): pid=7152 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 216.733092] audit: type=1106 audit(1788396252.184:907): pid=7148 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 216.739766] audit: type=1104 audit(1788396252.185:908): pid=7148 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 221.894638] kauditd_printk_skb: 1 callbacks suppressed [ 221.894642] audit: type=1130 audit(1788396257.346:910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10-172.31.18.78:22-20.61.25.254:44054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 222.870823] audit: type=1101 audit(1788396258.322:911): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 222.877029] audit: type=1103 audit(1788396258.324:912): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 222.882937] audit: type=1006 audit(1788396258.324:913): pid=7193 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 222.886183] audit: type=1300 audit(1788396258.324:913): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe677e79c0 a2=3 a3=0 items=0 ppid=1 pid=7193 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 222.892246] audit: type=1327 audit(1788396258.324:913): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 222.900457] audit: type=1105 audit(1788396258.352:914): pid=7193 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 222.907198] audit: type=1103 audit(1788396258.357:915): pid=7215 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 223.900966] audit: type=1106 audit(1788396259.351:916): pid=7193 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 223.908337] audit: type=1104 audit(1788396259.360:917): pid=7193 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 229.063223] kauditd_printk_skb: 1 callbacks suppressed [ 229.063227] audit: type=1130 audit(1788396264.514:919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4109-172.31.18.78:22-20.61.25.254:44064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 229.933240] audit: type=1101 audit(1788396265.384:920): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 229.944957] audit: type=1103 audit(1788396265.394:921): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 229.954806] audit: type=1006 audit(1788396265.394:922): pid=7246 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 229.966056] audit: type=1300 audit(1788396265.394:922): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdd9a0f370 a2=3 a3=0 items=0 ppid=1 pid=7246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 229.987021] audit: type=1327 audit(1788396265.394:922): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 229.995832] audit: type=1105 audit(1788396265.446:923): pid=7246 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 230.009301] audit: type=1103 audit(1788396265.455:924): pid=7274 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 230.882568] audit: type=1106 audit(1788396266.334:925): pid=7246 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 230.889286] audit: type=1104 audit(1788396266.334:926): pid=7246 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 238.649246] kauditd_printk_skb: 1 callbacks suppressed [ 238.649250] audit: type=1130 audit(1788396274.100:928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4110-172.31.18.78:22-102.178.147.96:57770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 238.721855] audit: type=1131 audit(1788396274.173:929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4110-172.31.18.78:22-102.178.147.96:57770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 244.850454] audit: type=1334 audit(1788396280.302:930): prog-id=131 op=UNLOAD [ 244.853304] audit: type=1334 audit(1788396280.302:931): prog-id=135 op=UNLOAD [ 245.361722] audit: type=1334 audit(1788396280.813:932): prog-id=85 op=UNLOAD [ 245.365414] audit: type=1334 audit(1788396280.813:933): prog-id=98 op=UNLOAD [ 245.647763] audit: type=1334 audit(1788396281.099:934): prog-id=287 op=LOAD [ 245.650178] audit: type=1334 audit(1788396281.101:935): prog-id=288 op=LOAD [ 245.651825] audit: type=1300 audit(1788396281.101:935): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=31e4042b1fd8 a2=98 a3=0 items=0 ppid=4035 pid=7395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 245.657805] audit: type=1327 audit(1788396281.101:935): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239653165333561376164613661306632333033663636366237346336 [ 245.663904] audit: type=1334 audit(1788396281.101:936): prog-id=288 op=UNLOAD [ 245.665625] audit: type=1300 audit(1788396281.101:936): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4035 pid=7395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null)