847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.136440] audit: type=1327 audit(1792548888.630:275): proctitle=6970367461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 [ 71.139545] audit: type=1325 audit(1792548888.630:276): table=filter:51 family=10 entries=1 op=nft_register_chain pid=2848 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" [ 71.142907] audit: type=1300 audit(1792548888.630:276): arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffee8d75f0 a2=0 a3=0 items=0 ppid=2815 pid=2848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/bin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 71.149360] audit: type=1327 audit(1792548888.630:276): proctitle=6970367461626C6573002D770035002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 [ 72.695732] audit: type=1334 audit(1792548890.216:277): prog-id=56 op=LOAD [ 79.469446] zram_generator::config[3430]: No configuration found. [ 80.212954] kauditd_printk_skb: 131 callbacks suppressed [ 80.212959] audit: type=1334 audit(1792548897.734:325): prog-id=86 op=LOAD [ 80.217737] audit: type=1334 audit(1792548897.737:326): prog-id=36 op=UNLOAD [ 80.219303] audit: type=1334 audit(1792548897.737:327): prog-id=87 op=LOAD [ 80.220786] audit: type=1334 audit(1792548897.737:328): prog-id=88 op=LOAD [ 80.222480] audit: type=1334 audit(1792548897.737:329): prog-id=37 op=UNLOAD [ 80.223999] audit: type=1334 audit(1792548897.737:330): prog-id=38 op=UNLOAD [ 80.225569] audit: type=1334 audit(1792548897.737:331): prog-id=89 op=LOAD [ 80.227087] audit: type=1334 audit(1792548897.737:332): prog-id=65 op=UNLOAD [ 80.228544] audit: type=1334 audit(1792548897.738:333): prog-id=90 op=LOAD [ 80.230101] audit: type=1334 audit(1792548897.738:334): prog-id=56 op=UNLOAD [ 85.757429] kauditd_printk_skb: 44 callbacks suppressed [ 85.757434] audit: type=1334 audit(1792548903.278:379): prog-id=112 op=LOAD [ 85.760997] audit: type=1334 audit(1792548903.282:380): prog-id=113 op=LOAD [ 85.762456] audit: type=1300 audit(1792548903.282:380): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5e174eeb1f90 a2=98 a3=0 items=0 ppid=3541 pid=3552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.768855] audit: type=1327 audit(1792548903.282:380): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564316332396433643262316638373461316461353030653838663033 [ 85.775853] audit: type=1334 audit(1792548903.282:381): prog-id=113 op=UNLOAD [ 85.778252] audit: type=1300 audit(1792548903.282:381): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3541 pid=3552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.784753] audit: type=1327 audit(1792548903.282:381): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564316332396433643262316638373461316461353030653838663033 [ 85.792289] audit: type=1334 audit(1792548903.282:382): prog-id=114 op=LOAD [ 85.794649] audit: type=1300 audit(1792548903.282:382): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5e174eeb2268 a2=98 a3=0 items=0 ppid=3541 pid=3552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.801181] audit: type=1327 audit(1792548903.282:382): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564316332396433643262316638373461316461353030653838663033 [ 96.213769] kauditd_printk_skb: 224 callbacks suppressed [ 96.213775] audit: type=1106 audit(1792548913.734:459): pid=2196 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 96.220390] audit: type=1104 audit(1792548913.734:460): pid=2196 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 96.376834] audit: type=1106 audit(1792548913.897:461): pid=2191 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 96.389613] audit: type=1104 audit(1792548913.897:462): pid=2191 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 96.399926] audit: type=1131 audit(1792548913.908:463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4-172.31.24.233:22-98.64.94.113:51970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 100.259727] audit: type=1130 audit(1792548917.780:464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-5-172.31.24.233:22-190.162.132.148:44810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 100.351167] audit: type=1131 audit(1792548917.872:465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-5-172.31.24.233:22-190.162.132.148:44810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 103.644902] audit: type=1325 audit(1792548921.164:466): table=filter:103 family=2 entries=15 op=nft_register_rule pid=3882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.650363] audit: type=1300 audit(1792548921.164:466): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffe0e34930 a2=0 a3=1 items=0 ppid=3600 pid=3882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.658496] audit: type=1327 audit(1792548921.164:466): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 103.662851] audit: type=1325 audit(1792548921.183:467): table=nat:104 family=2 entries=12 op=nft_register_rule pid=3882 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.666765] audit: type=1300 audit(1792548921.183:467): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe0e34930 a2=0 a3=1 items=0 ppid=3600 pid=3882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.676814] audit: type=1327 audit(1792548921.183:467): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 104.703898] audit: type=1325 audit(1792548922.224:468): table=filter:105 family=2 entries=18 op=nft_register_rule pid=3884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 104.708730] audit: type=1300 audit(1792548922.224:468): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffc7c9fc20 a2=0 a3=1 items=0 ppid=3600 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.718212] audit: type=1327 audit(1792548922.224:468): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 104.722750] audit: type=1325 audit(1792548922.239:469): table=nat:106 family=2 entries=12 op=nft_register_rule pid=3884 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 110.347903] kauditd_printk_skb: 58 callbacks suppressed [ 110.347908] audit: type=1334 audit(1792548927.869:490): prog-id=140 op=LOAD [ 110.352877] audit: type=1334 audit(1792548927.872:491): prog-id=141 op=LOAD [ 110.356755] audit: type=1300 audit(1792548927.872:491): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=27858b1f90 a2=98 a3=0 items=0 ppid=3897 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.365342] audit: type=1327 audit(1792548927.872:491): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431643232323237346138306264373231393830613037343935376436 [ 110.373251] audit: type=1334 audit(1792548927.873:492): prog-id=141 op=UNLOAD [ 110.377839] audit: type=1300 audit(1792548927.873:492): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3897 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.385402] audit: type=1327 audit(1792548927.873:492): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431643232323237346138306264373231393830613037343935376436 [ 110.391721] audit: type=1334 audit(1792548927.873:493): prog-id=142 op=LOAD [ 110.395018] audit: type=1300 audit(1792548927.873:493): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=27858b2268 a2=98 a3=0 items=0 ppid=3897 pid=4065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 110.405593] audit: type=1327 audit(1792548927.873:493): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431643232323237346138306264373231393830613037343935376436 [ 119.427815] kauditd_printk_skb: 28 callbacks suppressed [ 119.427820] audit: type=1334 audit(1792548936.947:504): prog-id=148 op=LOAD [ 119.431753] audit: type=1300 audit(1792548936.947:504): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=5cc7603b2268 a2=98 a3=0 items=0 ppid=4014 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.438025] audit: type=1327 audit(1792548936.947:504): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538336534336333643431366130386337333366666162613766636632 [ 119.443916] audit: type=1334 audit(1792548936.951:505): prog-id=149 op=LOAD [ 119.445802] audit: type=1300 audit(1792548936.951:505): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=5cc7603b1fa8 a2=98 a3=0 items=0 ppid=4014 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.452332] audit: type=1327 audit(1792548936.951:505): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538336534336333643431366130386337333366666162613766636632 [ 119.459499] audit: type=1334 audit(1792548936.951:506): prog-id=149 op=UNLOAD [ 119.461542] audit: type=1300 audit(1792548936.951:506): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4014 pid=4221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.469189] audit: type=1327 audit(1792548936.951:506): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538336534336333643431366130386337333366666162613766636632 [ 119.476113] audit: type=1334 audit(1792548936.951:507): prog-id=148 op=UNLOAD [ 126.264459] kauditd_printk_skb: 21 callbacks suppressed [ 126.264464] audit: type=1334 audit(1792548943.784:515): prog-id=153 op=UNLOAD [ 127.990246] audit: type=1325 audit(1792548945.510:516): table=filter:111 family=2 entries=21 op=nft_register_rule pid=4572 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 127.994444] audit: type=1300 audit(1792548945.510:516): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffdd9fec60 a2=0 a3=1 items=0 ppid=3600 pid=4572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.001735] audit: type=1327 audit(1792548945.510:516): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 128.007128] audit: type=1325 audit(1792548945.527:517): table=nat:112 family=2 entries=19 op=nft_register_chain pid=4572 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 128.011206] audit: type=1300 audit(1792548945.527:517): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffdd9fec60 a2=0 a3=1 items=0 ppid=3600 pid=4572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.018004] audit: type=1327 audit(1792548945.527:517): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 128.046722] audit: type=1334 audit(1792548945.566:518): prog-id=154 op=LOAD [ 128.048608] audit: type=1300 audit(1792548945.566:518): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=4445a46f0268 a2=98 a3=0 items=0 ppid=4014 pid=4547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.055042] audit: type=1327 audit(1792548945.566:518): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639633839633135383337306564646230313534666131626631356361 [ 131.383904] kauditd_printk_skb: 34 callbacks suppressed [ 131.383910] audit: type=1334 audit(1792548948.903:531): prog-id=162 op=LOAD [ 131.387594] audit: type=1300 audit(1792548948.903:531): arch=c00000b7 syscall=280 success=yes exit=13 a0=5 a1=fffffebd17a8 a2=94 a3=200000001 items=0 ppid=4640 pid=4664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.396816] audit: type=1327 audit(1792548948.903:531): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 131.399265] audit: type=1334 audit(1792548948.907:532): prog-id=162 op=UNLOAD [ 131.402009] audit: type=1300 audit(1792548948.907:532): arch=c00000b7 syscall=57 success=yes exit=0 a0=d a1=0 a2=ffff81305548 a3=200000001 items=0 ppid=4640 pid=4664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.411649] audit: type=1327 audit(1792548948.907:532): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 131.414723] audit: type=1334 audit(1792548948.907:533): prog-id=163 op=LOAD [ 131.416507] audit: type=1300 audit(1792548948.907:533): arch=c00000b7 syscall=280 success=yes exit=13 a0=5 a1=fffffebd1818 a2=98 a3=fffffebd1a28 items=0 ppid=4640 pid=4664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.423533] audit: type=1327 audit(1792548948.907:533): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 131.427809] audit: type=1334 audit(1792548948.907:534): prog-id=163 op=UNLOAD This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:15:49 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:15:49 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd ip-172-31-24-233 login: This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:15:51 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:15:51 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd ip-172-31-24-233 login: This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:15:52 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:15:52 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd ip-172-31-24-233 login: [ 138.497766] kauditd_printk_skb: 283 callbacks suppressed [ 138.497773] audit: type=1325 audit(1792548956.015:630): table=filter:120 family=2 entries=42 op=nft_register_chain pid=5054 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 138.506453] audit: type=1300 audit(1792548956.015:630): arch=c00000b7 syscall=211 success=yes exit=22584 a0=3 a1=ffffe9c02df0 a2=0 a3=ffff85f617e0 items=0 ppid=4664 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.518755] audit: type=1327 audit(1792548956.015:630): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 138.525715] audit: type=1325 audit(1792548956.038:631): table=calico-arp:121 family=3 entries=3 op=nft_register_chain pid=5063 subj=system_u:system_r:kernel_t:s0 comm="nft" [ 138.530640] audit: type=1300 audit(1792548956.038:631): arch=c00000b7 syscall=211 success=yes exit=732 a0=3 a1=ffffe05f1928 a2=0 a3=ffffac3b3020 items=0 ppid=4664 pid=5063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nft" exe="/usr/sbin/nft" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.539778] audit: type=1327 audit(1792548956.038:631): proctitle=2F7573722F7362696E2F6E6674002D66002D [ 138.635062] audit: type=1334 audit(1792548956.155:632): prog-id=210 op=LOAD [ 138.640480] audit: type=1334 audit(1792548956.160:633): prog-id=211 op=LOAD [ 138.642172] audit: type=1300 audit(1792548956.160:633): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=2b4f0d331f90 a2=98 a3=0 items=0 ppid=5059 pid=5078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 138.651586] audit: type=1327 audit(1792548956.160:633): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230326166343565396636323066636663353332343566326164333539 This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:15:58 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:15:58 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd ip-172-31-24-233 login: This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:16:00 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:16:00 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd ip-172-31-24-233 login: [ 143.691561] kauditd_printk_skb: 180 callbacks suppressed [ 143.691567] audit: type=1325 audit(1792548961.211:698): table=filter:132 family=2 entries=12 op=nft_register_rule pid=5653 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 143.699074] audit: type=1300 audit(1792548961.211:698): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffca25b220 a2=0 a3=1 items=0 ppid=3600 pid=5653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.708882] audit: type=1327 audit(1792548961.211:698): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 143.723248] audit: type=1325 audit(1792548961.242:699): table=nat:133 family=2 entries=46 op=nft_register_rule pid=5653 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 143.727935] audit: type=1300 audit(1792548961.242:699): arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffca25b220 a2=0 a3=1 items=0 ppid=3600 pid=5653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.737322] audit: type=1327 audit(1792548961.242:699): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 143.773387] audit: type=1334 audit(1792548961.293:700): prog-id=245 op=LOAD [ 143.778217] audit: type=1334 audit(1792548961.298:701): prog-id=246 op=LOAD [ 143.781729] audit: type=1300 audit(1792548961.298:701): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=32fbb3027f90 a2=98 a3=0 items=0 ppid=5578 pid=5591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.793947] audit: type=1327 audit(1792548961.298:701): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963383836363332376263376432353732616564396336653933363233 This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:16:01 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:16:01 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd ip-172-31-24-233 login: This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:16:02 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:16:02 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd ip-172-31-24-233 login: This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:16:03 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd This is ip-172-31-24-233 (Linux aarch64 6.12.113-flatcar) 02:16:03 SSH host key: SHA256:nGggJbhF19oUN2LFA5nb4jeTNm4BrT3QnrLmF1CyJJs (MLDSA44-ED25519) SSH host key: SHA256:zZy6KEy4ITItiI+J562gZ4m8OVqzPyboKuVH6SBU88c (ED25519) SSH host key: SHA256:5KkFd9+HvmgAOgRQQsqvLNEp42FdgmiZ9HHaIBlVlYM (RSA) SSH host key: SHA256:OP3bfjxvFH4Qnvsl0+6mFDiFmNmVV/OtO8V8DP/WOcA (ECDSA) eth0: 172.31.24.233 fe80::4ff:d6ff:fece:46dd ip-172-31-24-233 login: [ 151.387410] kauditd_printk_skb: 74 callbacks suppressed [ 151.387416] audit: type=1334 audit(1792548968.907:728): prog-id=260 op=LOAD [ 151.391564] audit: type=1334 audit(1792548968.911:729): prog-id=261 op=LOAD [ 151.393303] audit: type=1300 audit(1792548968.911:729): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=570474029f90 a2=98 a3=0 items=0 ppid=5326 pid=5766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.399785] audit: type=1327 audit(1792548968.911:729): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430666630373030643332343565323034626361303437666663356261 [ 151.406188] audit: type=1334 audit(1792548968.911:730): prog-id=261 op=UNLOAD [ 151.408116] audit: type=1300 audit(1792548968.911:730): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5326 pid=5766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.414423] audit: type=1327 audit(1792548968.911:730): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430666630373030643332343565323034626361303437666663356261 [ 151.420609] audit: type=1334 audit(1792548968.913:731): prog-id=262 op=LOAD [ 151.422238] audit: type=1300 audit(1792548968.913:731): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=57047402a268 a2=98 a3=0 items=0 ppid=5326 pid=5766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.428724] audit: type=1327 audit(1792548968.913:731): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430666630373030643332343565323034626361303437666663356261 [ 158.701400] kauditd_printk_skb: 35 callbacks suppressed [ 158.701406] audit: type=1334 audit(1792548976.221:745): prog-id=268 op=LOAD [ 158.705673] audit: type=1334 audit(1792548976.225:746): prog-id=269 op=LOAD [ 158.707764] audit: type=1300 audit(1792548976.225:746): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=61aa4716df90 a2=98 a3=0 items=0 ppid=5622 pid=5933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.714255] audit: type=1327 audit(1792548976.225:746): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361613834333064366638346135613563303639353638633332353730 [ 158.720582] audit: type=1334 audit(1792548976.225:747): prog-id=269 op=UNLOAD [ 158.722365] audit: type=1300 audit(1792548976.225:747): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5622 pid=5933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.728379] audit: type=1327 audit(1792548976.225:747): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361613834333064366638346135613563303639353638633332353730 [ 158.734880] audit: type=1334 audit(1792548976.225:748): prog-id=270 op=LOAD [ 158.736763] audit: type=1300 audit(1792548976.225:748): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=61aa4716e268 a2=98 a3=0 items=0 ppid=5622 pid=5933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.744363] audit: type=1327 audit(1792548976.225:748): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361613834333064366638346135613563303639353638633332353730 [ 164.040922] kauditd_printk_skb: 67 callbacks suppressed [ 164.040928] audit: type=1130 audit(1792548981.561:772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-7-172.31.24.233:22-98.64.94.113:35232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.925326] audit: type=1101 audit(1792548982.445:773): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 164.933364] audit: type=1103 audit(1792548982.453:774): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 164.939321] audit: type=1006 audit(1792548982.453:775): pid=6145 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 164.942955] audit: type=1300 audit(1792548982.453:775): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffe793b90 a2=3 a3=0 items=0 ppid=1 pid=6145 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.949487] audit: type=1327 audit(1792548982.453:775): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 164.974057] audit: type=1105 audit(1792548982.494:776): pid=6145 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 164.981160] audit: type=1103 audit(1792548982.498:777): pid=6151 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 165.566394] audit: type=1106 audit(1792548983.086:778): pid=6145 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 165.580598] audit: type=1104 audit(1792548983.086:779): pid=6145 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 170.740921] kauditd_printk_skb: 1 callbacks suppressed [ 170.740927] audit: type=1130 audit(1792548988.260:781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-8-172.31.24.233:22-98.64.94.113:35234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 171.616039] audit: type=1101 audit(1792548989.136:782): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 171.623481] audit: type=1103 audit(1792548989.143:783): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 171.629342] audit: type=1006 audit(1792548989.143:784): pid=6166 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 171.633102] audit: type=1300 audit(1792548989.143:784): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffeded9660 a2=3 a3=0 items=0 ppid=1 pid=6166 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 171.639521] audit: type=1327 audit(1792548989.143:784): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 171.652676] audit: type=1105 audit(1792548989.172:785): pid=6166 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 171.659946] audit: type=1103 audit(1792548989.173:786): pid=6170 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 172.276899] audit: type=1106 audit(1792548989.796:787): pid=6166 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 172.291955] audit: type=1104 audit(1792548989.797:788): pid=6166 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 177.442598] kauditd_printk_skb: 1 callbacks suppressed [ 177.442603] audit: type=1130 audit(1792548994.962:790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-9-172.31.24.233:22-98.64.94.113:54898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 178.321535] audit: type=1101 audit(1792548995.841:791): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 178.328755] audit: type=1103 audit(1792548995.849:792): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 178.335637] audit: type=1006 audit(1792548995.849:793): pid=6220 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 178.340102] audit: type=1300 audit(1792548995.849:793): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe1376920 a2=3 a3=0 items=0 ppid=1 pid=6220 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 178.346860] audit: type=1327 audit(1792548995.849:793): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 178.373927] audit: type=1105 audit(1792548995.893:794): pid=6220 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 178.388441] audit: type=1103 audit(1792548995.908:795): pid=6224 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 178.452819] audit: type=1325 audit(1792548995.972:796): table=filter:146 family=2 entries=10 op=nft_register_rule pid=6226 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 178.456113] audit: type=1300 audit(1792548995.972:796): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc939e2f0 a2=0 a3=1 items=0 ppid=3600 pid=6226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.100087] kauditd_printk_skb: 10 callbacks suppressed [ 184.100093] audit: type=1130 audit(1792549001.620:802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10-172.31.24.233:22-98.64.94.113:38298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.960132] audit: type=1101 audit(1792549002.480:803): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 184.966899] audit: type=1103 audit(1792549002.487:804): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 184.972931] audit: type=1006 audit(1792549002.487:805): pid=6294 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 184.977226] audit: type=1300 audit(1792549002.487:805): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe13fad50 a2=3 a3=0 items=0 ppid=1 pid=6294 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.984145] audit: type=1327 audit(1792549002.487:805): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 185.008530] audit: type=1105 audit(1792549002.528:806): pid=6294 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 185.017272] audit: type=1103 audit(1792549002.537:807): pid=6298 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 185.591903] audit: type=1106 audit(1792549003.112:808): pid=6294 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 185.603061] audit: type=1104 audit(1792549003.112:809): pid=6294 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 190.804250] kauditd_printk_skb: 32 callbacks suppressed [ 190.804256] audit: type=1325 audit(1792549008.323:832): table=filter:152 family=2 entries=9 op=nft_register_rule pid=6397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 190.809772] audit: type=1300 audit(1792549008.323:832): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffcc142330 a2=0 a3=1 items=0 ppid=3600 pid=6397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.816805] audit: type=1327 audit(1792549008.323:832): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 190.822617] audit: type=1325 audit(1792549008.342:833): table=nat:153 family=2 entries=31 op=nft_register_chain pid=6397 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 190.827753] audit: type=1300 audit(1792549008.342:833): arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=ffffcc142330 a2=0 a3=1 items=0 ppid=3600 pid=6397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.836031] audit: type=1327 audit(1792549008.342:833): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 194.242024] audit: type=1130 audit(1792549011.761:834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-4101-172.31.24.233:22-98.64.94.113:36874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.118010] audit: type=1101 audit(1792549012.638:835): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 195.126005] audit: type=1103 audit(1792549012.646:836): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 195.132954] audit: type=1006 audit(1792549012.646:837): pid=6431 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 195.927808] kauditd_printk_skb: 7 callbacks suppressed [ 195.927813] audit: type=1130 audit(1792549013.448:843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-12-172.31.24.233:22-98.64.94.113:36884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 196.781280] audit: type=1101 audit(1792549014.301:844): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 196.791547] audit: type=1103 audit(1792549014.308:845): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 196.797762] audit: type=1006 audit(1792549014.308:846): pid=6447 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 196.801585] audit: type=1300 audit(1792549014.308:846): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc93425b0 a2=3 a3=0 items=0 ppid=1 pid=6447 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.808254] audit: type=1327 audit(1792549014.308:846): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 196.829014] audit: type=1105 audit(1792549014.348:847): pid=6447 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 196.837031] audit: type=1103 audit(1792549014.357:848): pid=6451 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 197.700895] audit: type=1106 audit(1792549015.220:849): pid=6447 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 197.713094] audit: type=1104 audit(1792549015.220:850): pid=6447 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 201.362781] kauditd_printk_skb: 19 callbacks suppressed [ 201.362786] audit: type=1325 audit(1792549018.882:864): table=filter:156 family=2 entries=32 op=nft_register_rule pid=6509 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 201.367395] audit: type=1300 audit(1792549018.882:864): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffe76b8aa0 a2=0 a3=1 items=0 ppid=3600 pid=6509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 201.374028] audit: type=1327 audit(1792549018.882:864): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 201.380320] audit: type=1325 audit(1792549018.900:865): table=nat:157 family=2 entries=26 op=nft_register_rule pid=6509 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 201.383599] audit: type=1300 audit(1792549018.900:865): arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffe76b8aa0 a2=0 a3=1 items=0 ppid=3600 pid=6509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 201.390301] audit: type=1327 audit(1792549018.900:865): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 201.470135] audit: type=1101 audit(1792549018.990:866): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 201.477367] audit: type=1103 audit(1792549018.997:867): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 201.483315] audit: type=1006 audit(1792549018.998:868): pid=6503 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 201.487357] audit: type=1300 audit(1792549018.998:868): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffff8d85a50 a2=3 a3=0 items=0 ppid=1 pid=6503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.451955] kauditd_printk_skb: 17 callbacks suppressed [ 207.451960] audit: type=1325 audit(1792549024.971:883): table=filter:158 family=2 entries=20 op=nft_register_rule pid=6568 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 207.458340] audit: type=1300 audit(1792549024.971:883): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc5f456f0 a2=0 a3=1 items=0 ppid=3600 pid=6568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.466877] audit: type=1327 audit(1792549024.971:883): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 207.482756] audit: type=1325 audit(1792549025.001:884): table=nat:159 family=2 entries=110 op=nft_register_chain pid=6568 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 207.487729] audit: type=1300 audit(1792549025.001:884): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffc5f456f0 a2=0 a3=1 items=0 ppid=3600 pid=6568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 207.494936] audit: type=1327 audit(1792549025.001:884): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 209.148702] audit: type=1130 audit(1792549026.668:885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-14-172.31.24.233:22-98.64.94.113:52566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 210.000123] audit: type=1101 audit(1792549027.520:886): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 210.007724] audit: type=1103 audit(1792549027.527:887): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 210.013275] audit: type=1006 audit(1792549027.530:888): pid=6570 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 215.767489] kauditd_printk_skb: 7 callbacks suppressed [ 215.767494] audit: type=1130 audit(1792549033.288:894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-15-172.31.24.233:22-98.64.94.113:53806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.629771] audit: type=1101 audit(1792549034.151:895): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 216.637301] audit: type=1103 audit(1792549034.158:896): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 216.643206] audit: type=1006 audit(1792549034.158:897): pid=6620 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 216.647069] audit: type=1300 audit(1792549034.158:897): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcc587af0 a2=3 a3=0 items=0 ppid=1 pid=6620 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.654426] audit: type=1327 audit(1792549034.158:897): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 216.673930] audit: type=1105 audit(1792549034.194:898): pid=6620 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 216.682496] audit: type=1103 audit(1792549034.203:899): pid=6624 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 217.265247] audit: type=1106 audit(1792549034.785:900): pid=6620 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 217.276344] audit: type=1104 audit(1792549034.785:901): pid=6620 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 222.438491] kauditd_printk_skb: 1 callbacks suppressed [ 222.438497] audit: type=1130 audit(1792549039.959:903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-4104-172.31.24.233:22-98.64.94.113:39076 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 223.340423] audit: type=1101 audit(1792549040.861:904): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 223.349419] audit: type=1103 audit(1792549040.869:905): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 223.354971] audit: type=1006 audit(1792549040.869:906): pid=6660 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 223.358799] audit: type=1300 audit(1792549040.869:906): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc51aa0b0 a2=3 a3=0 items=0 ppid=1 pid=6660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 223.366014] audit: type=1327 audit(1792549040.869:906): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 223.387414] audit: type=1105 audit(1792549040.907:907): pid=6660 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 223.395536] audit: type=1103 audit(1792549040.916:908): pid=6664 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 223.948164] audit: type=1106 audit(1792549041.469:909): pid=6660 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 223.955209] audit: type=1104 audit(1792549041.472:910): pid=6660 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 229.118732] kauditd_printk_skb: 1 callbacks suppressed [ 229.118738] audit: type=1130 audit(1792549046.639:912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-4105-172.31.24.233:22-98.64.94.113:39080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 229.988906] audit: type=1101 audit(1792549047.510:913): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 229.996077] audit: type=1103 audit(1792549047.517:914): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 230.003297] audit: type=1006 audit(1792549047.517:915): pid=6731 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 230.009885] audit: type=1300 audit(1792549047.517:915): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=fffffd331a70 a2=3 a3=0 items=0 ppid=1 pid=6731 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 230.016505] audit: type=1327 audit(1792549047.517:915): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 230.029776] audit: type=1105 audit(1792549047.550:916): pid=6731 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 230.038240] audit: type=1103 audit(1792549047.559:917): pid=6754 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 230.587097] audit: type=1106 audit(1792549048.108:918): pid=6731 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 230.595371] audit: type=1104 audit(1792549048.109:919): pid=6731 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success'