d=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.221795] audit: type=1327 audit(1793107086.611:386): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961316164613636303234303564663062613265646161353239396339 [ 82.228882] audit: type=1334 audit(1793107086.611:387): prog-id=117 op=LOAD [ 82.230185] audit: type=1300 audit(1793107086.611:387): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1f3301c96290 a2=98 a3=0 items=0 ppid=3456 pid=3467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 82.235805] audit: type=1327 audit(1793107086.611:387): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961316164613636303234303564663062613265646161353239396339 [ 93.392046] kauditd_printk_skb: 224 callbacks suppressed [ 93.392050] audit: type=1106 audit(1793107097.799:464): pid=2250 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 93.397427] audit: type=1104 audit(1793107097.799:465): pid=2250 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 93.553455] audit: type=1106 audit(1793107097.961:466): pid=2245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 93.562459] audit: type=1104 audit(1793107097.961:467): pid=2245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 93.567583] audit: type=1131 audit(1793107097.965:468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4-172.31.30.151:22-98.64.94.113:53842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 97.168997] audit: type=1325 audit(1793107101.577:469): table=filter:103 family=2 entries=15 op=nft_register_rule pid=3794 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 97.173359] audit: type=1300 audit(1793107101.577:469): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe40664010 a2=0 a3=7ffe40663ffc items=0 ppid=3549 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 97.181802] audit: type=1327 audit(1793107101.577:469): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 97.186291] audit: type=1325 audit(1793107101.594:470): table=nat:104 family=2 entries=12 op=nft_register_rule pid=3794 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 97.210788] audit: type=1300 audit(1793107101.594:470): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe40664010 a2=0 a3=0 items=0 ppid=3549 pid=3794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.269744] kauditd_printk_skb: 7 callbacks suppressed [ 99.269749] audit: type=1325 audit(1793107103.677:473): table=filter:107 family=2 entries=21 op=nft_register_rule pid=3803 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 99.274197] audit: type=1300 audit(1793107103.677:473): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe863ea220 a2=0 a3=7ffe863ea20c items=0 ppid=3549 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.281174] audit: type=1327 audit(1793107103.677:473): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 99.285303] audit: type=1325 audit(1793107103.691:474): table=nat:108 family=2 entries=12 op=nft_register_rule pid=3803 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 99.289984] audit: type=1300 audit(1793107103.691:474): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe863ea220 a2=0 a3=0 items=0 ppid=3549 pid=3803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.300097] audit: type=1327 audit(1793107103.691:474): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 99.591387] audit: type=1334 audit(1793107103.999:475): prog-id=133 op=LOAD [ 99.594735] audit: type=1334 audit(1793107104.001:476): prog-id=134 op=LOAD [ 99.598851] audit: type=1300 audit(1793107104.001:476): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3b03e3f31fd8 a2=98 a3=0 items=0 ppid=3854 pid=3884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.607293] audit: type=1327 audit(1793107104.001:476): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661643666646537633761323639623036383034303566633763353263 [ 105.274093] kauditd_printk_skb: 56 callbacks suppressed [ 105.274097] audit: type=1334 audit(1793107109.682:497): prog-id=146 op=LOAD [ 105.276900] audit: type=1334 audit(1793107109.683:498): prog-id=147 op=LOAD [ 105.278295] audit: type=1300 audit(1793107109.683:498): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3185bf731fd8 a2=98 a3=0 items=0 ppid=3909 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.284310] audit: type=1327 audit(1793107109.683:498): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932396239373537666638316434613934663364666137386664626538 [ 105.292669] audit: type=1334 audit(1793107109.683:499): prog-id=147 op=UNLOAD [ 105.294512] audit: type=1300 audit(1793107109.683:499): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3909 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.300897] audit: type=1327 audit(1793107109.683:499): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932396239373537666638316434613934663364666137386664626538 [ 105.307079] audit: type=1334 audit(1793107109.683:500): prog-id=148 op=LOAD [ 105.309089] audit: type=1300 audit(1793107109.683:500): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3185bf732290 a2=98 a3=0 items=0 ppid=3909 pid=4018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.315543] audit: type=1327 audit(1793107109.683:500): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932396239373537666638316434613934663364666137386664626538 [ 111.818502] kauditd_printk_skb: 12 callbacks suppressed [ 111.818506] audit: type=1334 audit(1793107116.226:505): prog-id=151 op=LOAD [ 111.821343] audit: type=1300 audit(1793107116.226:505): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=3d30fb6b2290 a2=98 a3=0 items=0 ppid=3854 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.827376] audit: type=1327 audit(1793107116.226:505): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383261303133353432643630613661646338356330303839393033 [ 111.833482] audit: type=1334 audit(1793107116.226:506): prog-id=152 op=LOAD [ 111.834917] audit: type=1300 audit(1793107116.226:506): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3d30fb6b1fe8 a2=98 a3=0 items=0 ppid=3854 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.840761] audit: type=1327 audit(1793107116.226:506): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383261303133353432643630613661646338356330303839393033 [ 111.846128] audit: type=1334 audit(1793107116.226:507): prog-id=152 op=UNLOAD [ 111.847736] audit: type=1300 audit(1793107116.226:507): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3854 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.853921] audit: type=1327 audit(1793107116.226:507): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339383261303133353432643630613661646338356330303839393033 [ 111.859664] audit: type=1334 audit(1793107116.226:508): prog-id=151 op=UNLOAD [ 117.877164] kauditd_printk_skb: 22 callbacks suppressed [ 117.877168] audit: type=1334 audit(1793107122.285:517): prog-id=157 op=LOAD [ 117.879917] audit: type=1300 audit(1793107122.285:517): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=2f030968290 a2=98 a3=0 items=0 ppid=3854 pid=4333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.885980] audit: type=1327 audit(1793107122.285:517): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963353264353838306330626561623739626166663835333135316564 [ 117.891907] audit: type=1334 audit(1793107122.285:518): prog-id=158 op=LOAD [ 117.893385] audit: type=1300 audit(1793107122.285:518): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2f030967fe8 a2=98 a3=0 items=0 ppid=3854 pid=4333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.900976] audit: type=1327 audit(1793107122.285:518): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963353264353838306330626561623739626166663835333135316564 [ 117.907121] audit: type=1334 audit(1793107122.285:519): prog-id=158 op=UNLOAD [ 117.909807] audit: type=1300 audit(1793107122.285:519): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3854 pid=4333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.915643] audit: type=1327 audit(1793107122.285:519): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963353264353838306330626561623739626166663835333135316564 [ 117.923235] audit: type=1334 audit(1793107122.285:520): prog-id=157 op=UNLOAD This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:46 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:46 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b ip-172-31-30-151 login: [ 124.529986] kauditd_printk_skb: 49 callbacks suppressed [ 124.529990] audit: type=1334 audit(1793107128.938:538): prog-id=170 op=LOAD [ 124.533653] audit: type=1334 audit(1793107128.941:539): prog-id=171 op=LOAD [ 124.534985] audit: type=1300 audit(1793107128.941:539): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1846e1215fd8 a2=98 a3=0 items=0 ppid=4518 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.540644] audit: type=1327 audit(1793107128.941:539): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636316261386334363430353933346266343439613432653937346264 [ 124.546278] audit: type=1334 audit(1793107128.941:540): prog-id=171 op=UNLOAD [ 124.547883] audit: type=1300 audit(1793107128.941:540): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4518 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.553605] audit: type=1327 audit(1793107128.941:540): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636316261386334363430353933346266343439613432653937346264 [ 124.559404] audit: type=1334 audit(1793107128.941:541): prog-id=172 op=LOAD [ 124.560907] audit: type=1300 audit(1793107128.941:541): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1846e1216290 a2=98 a3=0 items=0 ppid=4518 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.566882] audit: type=1327 audit(1793107128.941:541): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636316261386334363430353933346266343439613432653937346264 This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:54 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:54 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b ip-172-31-30-151 login: This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:55 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:55 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b ip-172-31-30-151 login: [ 131.095586] kauditd_printk_skb: 267 callbacks suppressed [ 131.095590] audit: type=1325 audit(1793107135.499:631): table=filter:118 family=2 entries=36 op=nft_register_chain pid=5018 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 131.104046] audit: type=1300 audit(1793107135.499:631): arch=c000003e syscall=46 success=yes exit=19608 a0=3 a1=7fff3a3b7ee0 a2=0 a3=7fff3a3b7ecc items=0 ppid=4773 pid=5018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.114547] audit: type=1327 audit(1793107135.499:631): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 131.184931] audit: type=1325 audit(1793107135.593:632): table=calico-arp:119 family=3 entries=3 op=nft_register_chain pid=5034 subj=system_u:system_r:kernel_t:s0 comm="nft" [ 131.187994] audit: type=1300 audit(1793107135.593:632): arch=c000003e syscall=46 success=yes exit=732 a0=3 a1=7ffd05506700 a2=0 a3=7f2010fc6c88 items=0 ppid=4773 pid=5034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nft" exe="/usr/sbin/nft" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.195125] audit: type=1327 audit(1793107135.593:632): proctitle=2F7573722F7362696E2F6E6674002D66002D [ 131.550043] audit: type=1334 audit(1793107135.958:633): prog-id=213 op=LOAD [ 131.571498] audit: type=1334 audit(1793107135.979:634): prog-id=214 op=LOAD [ 131.572994] audit: type=1300 audit(1793107135.979:634): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2da2bb9b1fd8 a2=98 a3=0 items=0 ppid=5033 pid=5061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.582550] audit: type=1327 audit(1793107135.979:634): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662646364656161653836383464623733396135626134656366616434 This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:57 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:57 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b ip-172-31-30-151 login: This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:58 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:58 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b ip-172-31-30-151 login: This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:59 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:18:59 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b ip-172-31-30-151 login: This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:19:00 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b This is ip-172-31-30-151 (Linux x86_64 6.12.114-flatcar) 13:19:00 SSH host key: SHA256:vJwU/tF9qOgaR/Gwcau45Zhki1G8sc/9eMNWcqTTu48 (ECDSA) SSH host key: SHA256:LR3su4jJvVJiKeOaH1vTTOVqsehtVbO1dzm/jgXjSgU (MLDSA44-ED25519) SSH host key: SHA256:aDRVGCzxrSgVMZzUmNR4b9DFPjJs0tgKq+peOHfRTy0 (RSA) SSH host key: SHA256:M8YTxRcSbDcnncDKe6mIYA+MtS3NX0qpGOqV9ObnFs0 (ED25519) eth0: 172.31.30.151 fe80::4ff:c1ff:fef6:2b0b ip-172-31-30-151 login: [ 136.748400] kauditd_printk_skb: 242 callbacks suppressed [ 136.748404] audit: type=1334 audit(1793107141.156:721): prog-id=258 op=LOAD [ 136.751178] audit: type=1334 audit(1793107141.159:722): prog-id=259 op=LOAD [ 136.752441] audit: type=1300 audit(1793107141.159:722): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=225e91c29fd8 a2=98 a3=0 items=0 ppid=5033 pid=5629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.758437] audit: type=1327 audit(1793107141.159:722): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962626135656439613434323763346235623933303733306531366561 [ 136.764213] audit: type=1334 audit(1793107141.159:723): prog-id=259 op=UNLOAD [ 136.765931] audit: type=1300 audit(1793107141.159:723): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5033 pid=5629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.771649] audit: type=1327 audit(1793107141.159:723): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962626135656439613434323763346235623933303733306531366561 [ 136.777552] audit: type=1334 audit(1793107141.159:724): prog-id=260 op=LOAD [ 136.779285] audit: type=1300 audit(1793107141.159:724): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=225e91c2a290 a2=98 a3=0 items=0 ppid=5033 pid=5629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.785970] audit: type=1327 audit(1793107141.159:724): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962626135656439613434323763346235623933303733306531366561 [ 142.689451] kauditd_printk_skb: 40 callbacks suppressed [ 142.689455] audit: type=1325 audit(1793107147.097:739): table=filter:138 family=2 entries=12 op=nft_register_rule pid=5781 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 142.693626] audit: type=1300 audit(1793107147.097:739): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdb250fdb0 a2=0 a3=7ffdb250fd9c items=0 ppid=3549 pid=5781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.699537] audit: type=1327 audit(1793107147.097:739): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 142.773856] audit: type=1325 audit(1793107147.181:740): table=nat:139 family=2 entries=58 op=nft_register_chain pid=5781 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 142.777311] audit: type=1300 audit(1793107147.181:740): arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffdb250fdb0 a2=0 a3=7ffdb250fd9c items=0 ppid=3549 pid=5781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.784053] audit: type=1327 audit(1793107147.181:740): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 143.748332] audit: type=1334 audit(1793107148.156:741): prog-id=268 op=LOAD [ 143.750055] audit: type=1300 audit(1793107148.156:741): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=12ee1ad32290 a2=98 a3=0 items=0 ppid=5209 pid=5797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.756565] audit: type=1327 audit(1793107148.156:741): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363565316132333037346531303263393938363137633865386637 [ 143.763669] audit: type=1334 audit(1793107148.156:742): prog-id=269 op=LOAD [ 148.942235] kauditd_printk_skb: 45 callbacks suppressed [ 148.942240] audit: type=1334 audit(1793107153.350:758): prog-id=276 op=LOAD [ 148.944802] audit: type=1334 audit(1793107153.351:759): prog-id=277 op=LOAD [ 148.946225] audit: type=1300 audit(1793107153.351:759): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=6594e9cffd8 a2=98 a3=0 items=0 ppid=5438 pid=5875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.952068] audit: type=1327 audit(1793107153.351:759): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032616163313438303361363833643964373539326432383962343735 [ 148.958116] audit: type=1334 audit(1793107153.351:760): prog-id=277 op=UNLOAD [ 148.959646] audit: type=1300 audit(1793107153.351:760): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5438 pid=5875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.965632] audit: type=1327 audit(1793107153.351:760): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032616163313438303361363833643964373539326432383962343735 [ 148.972526] audit: type=1334 audit(1793107153.351:761): prog-id=278 op=LOAD [ 148.973957] audit: type=1300 audit(1793107153.351:761): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=6594e9d0290 a2=98 a3=0 items=0 ppid=5438 pid=5875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.979934] audit: type=1327 audit(1793107153.351:761): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032616163313438303361363833643964373539326432383962343735 [ 155.461335] kauditd_printk_skb: 33 callbacks suppressed [ 155.461339] audit: type=1130 audit(1793107159.869:773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4100-172.31.30.151:22-98.64.94.113:45722 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 156.502248] audit: type=1101 audit(1793107160.910:774): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 156.512954] audit: type=1103 audit(1793107160.919:775): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 156.519948] audit: type=1006 audit(1793107160.919:776): pid=6096 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 156.523502] audit: type=1300 audit(1793107160.919:776): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff1b8c4730 a2=3 a3=0 items=0 ppid=1 pid=6096 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.530267] audit: type=1327 audit(1793107160.919:776): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 156.568386] audit: type=1105 audit(1793107160.976:777): pid=6096 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 156.580879] audit: type=1103 audit(1793107160.987:778): pid=6101 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 157.868115] audit: type=1106 audit(1793107162.276:779): pid=6096 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 157.876779] audit: type=1104 audit(1793107162.276:780): pid=6096 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 162.738809] kauditd_printk_skb: 1 callbacks suppressed [ 162.738813] audit: type=1325 audit(1793107167.146:782): table=filter:146 family=2 entries=10 op=nft_register_rule pid=6114 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 162.742880] audit: type=1300 audit(1793107167.146:782): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffef6b6d9a0 a2=0 a3=7ffef6b6d98c items=0 ppid=3549 pid=6114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.748760] audit: type=1327 audit(1793107167.146:782): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 162.751329] audit: type=1325 audit(1793107167.153:783): table=nat:147 family=2 entries=36 op=nft_register_chain pid=6114 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 162.754222] audit: type=1300 audit(1793107167.153:783): arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffef6b6d9a0 a2=0 a3=7ffef6b6d98c items=0 ppid=3549 pid=6114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 162.760062] audit: type=1327 audit(1793107167.153:783): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 163.044957] audit: type=1130 audit(1793107167.452:784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-172.31.30.151:22-98.64.94.113:45738 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 163.981742] audit: type=1101 audit(1793107168.388:785): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 163.990931] audit: type=1103 audit(1793107168.396:786): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 163.999561] audit: type=1006 audit(1793107168.396:787): pid=6116 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 170.033071] kauditd_printk_skb: 13 callbacks suppressed [ 170.033075] audit: type=1130 audit(1793107174.441:795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-6-172.31.30.151:22-98.64.94.113:41232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 170.943832] audit: type=1101 audit(1793107175.352:796): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 170.949929] audit: type=1103 audit(1793107175.355:797): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 170.955861] audit: type=1006 audit(1793107175.355:798): pid=6171 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 170.959159] audit: type=1300 audit(1793107175.355:798): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffffd5857b0 a2=3 a3=0 items=0 ppid=1 pid=6171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 170.965865] audit: type=1327 audit(1793107175.355:798): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 170.982020] audit: type=1105 audit(1793107175.390:799): pid=6171 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 170.989090] audit: type=1103 audit(1793107175.397:800): pid=6182 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 171.642476] audit: type=1106 audit(1793107176.050:801): pid=6171 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 171.649426] audit: type=1104 audit(1793107176.050:802): pid=6171 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 176.636088] kauditd_printk_skb: 1 callbacks suppressed [ 176.636092] audit: type=1325 audit(1793107181.042:804): table=filter:150 family=2 entries=73 op=nft_register_chain pid=6262 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 176.640977] audit: type=1300 audit(1793107181.042:804): arch=c000003e syscall=46 success=yes exit=30460 a0=3 a1=7fffc3559470 a2=0 a3=7fffc355945c items=0 ppid=4773 pid=6262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.648382] audit: type=1327 audit(1793107181.042:804): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 176.693446] audit: type=1325 audit(1793107181.101:805): table=filter:151 family=2 entries=72 op=nft_register_chain pid=6271 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 176.697361] audit: type=1300 audit(1793107181.101:805): arch=c000003e syscall=46 success=yes exit=29636 a0=3 a1=7fff9ace4090 a2=0 a3=7fff9ace407c items=0 ppid=4773 pid=6271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 176.704106] audit: type=1327 audit(1793107181.101:805): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 176.805619] audit: type=1130 audit(1793107181.213:806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-7-172.31.30.151:22-98.64.94.113:52934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.794434] audit: type=1101 audit(1793107182.202:807): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 177.800416] audit: type=1103 audit(1793107182.205:808): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 177.807067] audit: type=1006 audit(1793107182.205:809): pid=6274 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 181.670740] kauditd_printk_skb: 26 callbacks suppressed [ 181.670744] audit: type=1325 audit(1793107186.073:830): table=filter:152 family=2 entries=9 op=nft_register_rule pid=6337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 181.679731] audit: type=1300 audit(1793107186.073:830): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe96dd2430 a2=0 a3=7ffe96dd241c items=0 ppid=3549 pid=6337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.694741] audit: type=1327 audit(1793107186.073:830): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 181.702997] audit: type=1325 audit(1793107186.106:831): table=nat:153 family=2 entries=31 op=nft_register_chain pid=6337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 181.709033] audit: type=1300 audit(1793107186.106:831): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffe96dd2430 a2=0 a3=7ffe96dd241c items=0 ppid=3549 pid=6337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 181.721738] audit: type=1327 audit(1793107186.106:831): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 182.512266] audit: type=1106 audit(1793107186.920:832): pid=6306 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 182.518965] audit: type=1104 audit(1793107186.923:833): pid=6306 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 182.525381] audit: type=1131 audit(1793107186.933:834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-9-172.31.30.151:22-98.64.94.113:52948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.647747] audit: type=1130 audit(1793107192.055:835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4101-172.31.30.151:22-98.64.94.113:56564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 188.626116] audit: type=1101 audit(1793107193.034:836): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 188.632199] audit: type=1103 audit(1793107193.034:837): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 188.638032] audit: type=1006 audit(1793107193.034:838): pid=6396 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 188.641001] audit: type=1300 audit(1793107193.034:838): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd028ae600 a2=3 a3=0 items=0 ppid=1 pid=6396 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.647156] audit: type=1327 audit(1793107193.034:838): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 188.656154] audit: type=1105 audit(1793107193.064:839): pid=6396 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 188.662957] audit: type=1103 audit(1793107193.067:840): pid=6400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 189.592797] audit: type=1106 audit(1793107194.001:841): pid=6396 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 189.600358] audit: type=1104 audit(1793107194.001:842): pid=6396 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 193.887332] kauditd_printk_skb: 9 callbacks suppressed [ 193.887336] audit: type=1106 audit(1793107198.295:850): pid=6412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 193.896493] audit: type=1104 audit(1793107198.295:851): pid=6412 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 193.901576] audit: type=1131 audit(1793107198.299:852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-4102-172.31.30.151:22-98.64.94.113:56570 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.048406] audit: type=1130 audit(1793107198.456:853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10-172.31.30.151:22-98.64.94.113:56578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 194.950489] audit: type=1101 audit(1793107199.358:854): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 194.967206] audit: type=1103 audit(1793107199.367:855): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 194.973040] audit: type=1006 audit(1793107199.367:856): pid=6426 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 194.976644] audit: type=1300 audit(1793107199.367:856): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd0f4a2d10 a2=3 a3=0 items=0 ppid=1 pid=6426 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 194.982922] audit: type=1327 audit(1793107199.367:856): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 194.992630] audit: type=1105 audit(1793107199.400:857): pid=6426 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 198.920841] kauditd_printk_skb: 18 callbacks suppressed [ 198.920845] audit: type=1325 audit(1793107203.328:870): table=filter:156 family=2 entries=32 op=nft_register_rule pid=6489 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 198.925204] audit: type=1300 audit(1793107203.328:870): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd7c7f3220 a2=0 a3=7ffd7c7f320c items=0 ppid=3549 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.931018] audit: type=1327 audit(1793107203.328:870): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 198.933576] audit: type=1325 audit(1793107203.337:871): table=nat:157 family=2 entries=26 op=nft_register_rule pid=6489 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 198.936547] audit: type=1300 audit(1793107203.337:871): arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd7c7f3220 a2=0 a3=0 items=0 ppid=3549 pid=6489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.942381] audit: type=1327 audit(1793107203.337:871): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 200.131772] audit: type=1106 audit(1793107204.540:872): pid=6478 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 200.140699] audit: type=1104 audit(1793107204.540:873): pid=6478 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 200.145809] audit: type=1131 audit(1793107204.544:874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-11-172.31.30.151:22-98.64.94.113:49206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 200.283578] audit: type=1130 audit(1793107204.691:875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-4103-172.31.30.151:22-98.64.94.113:49210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 204.237044] kauditd_printk_skb: 10 callbacks suppressed [ 204.237048] audit: type=1325 audit(1793107208.644:884): table=filter:158 family=2 entries=20 op=nft_register_rule pid=6539 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 204.241193] audit: type=1300 audit(1793107208.644:884): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc46b76970 a2=0 a3=7ffc46b7695c items=0 ppid=3549 pid=6539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.247140] audit: type=1327 audit(1793107208.644:884): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 204.250130] audit: type=1325 audit(1793107208.655:885): table=nat:159 family=2 entries=110 op=nft_register_chain pid=6539 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 204.253140] audit: type=1300 audit(1793107208.655:885): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffc46b76970 a2=0 a3=7ffc46b7695c items=0 ppid=3549 pid=6539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 204.258961] audit: type=1327 audit(1793107208.655:885): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 207.101731] audit: type=1130 audit(1793107211.508:886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4104-172.31.30.151:22-98.64.94.113:56288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 208.145730] audit: type=1101 audit(1793107212.553:887): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 208.151769] audit: type=1103 audit(1793107212.556:888): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 208.157651] audit: type=1006 audit(1793107212.556:889): pid=6541 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 214.297661] kauditd_printk_skb: 7 callbacks suppressed [ 214.297666] audit: type=1130 audit(1793107218.705:895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-12-172.31.30.151:22-98.64.94.113:56298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 215.323332] audit: type=1101 audit(1793107219.731:896): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 215.330756] audit: type=1103 audit(1793107219.734:897): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 215.336686] audit: type=1006 audit(1793107219.734:898): pid=6611 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 215.340559] audit: type=1300 audit(1793107219.734:898): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd4087e140 a2=3 a3=0 items=0 ppid=1 pid=6611 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 215.346858] audit: type=1327 audit(1793107219.734:898): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 215.356857] audit: type=1105 audit(1793107219.765:899): pid=6611 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 215.364557] audit: type=1103 audit(1793107219.772:900): pid=6638 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 216.615889] audit: type=1106 audit(1793107221.024:901): pid=6611 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 216.623083] audit: type=1104 audit(1793107221.024:902): pid=6611 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 221.785720] kauditd_printk_skb: 1 callbacks suppressed [ 221.785724] audit: type=1130 audit(1793107226.193:904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4105-172.31.30.151:22-98.64.94.113:42946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 222.768938] audit: type=1101 audit(1793107227.177:905): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 222.781525] audit: type=1103 audit(1793107227.189:906): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 222.787032] audit: type=1006 audit(1793107227.189:907): pid=6660 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 222.790762] audit: type=1300 audit(1793107227.189:907): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe20a03cd0 a2=3 a3=0 items=0 ppid=1 pid=6660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 222.797096] audit: type=1327 audit(1793107227.189:907): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 222.813291] audit: type=1105 audit(1793107227.221:908): pid=6660 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 222.819943] audit: type=1103 audit(1793107227.224:909): pid=6664 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 223.967987] audit: type=1106 audit(1793107228.376:910): pid=6660 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 223.975762] audit: type=1104 audit(1793107228.376:911): pid=6660 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 229.127247] kauditd_printk_skb: 1 callbacks suppressed [ 229.127251] audit: type=1130 audit(1793107233.535:913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4106-172.31.30.151:22-98.64.94.113:49918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 230.069628] audit: type=1101 audit(1793107234.477:914): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 230.075604] audit: type=1103 audit(1793107234.480:915): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 230.081728] audit: type=1006 audit(1793107234.480:916): pid=6719 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 230.085053] audit: type=1300 audit(1793107234.480:916): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff83068440 a2=3 a3=0 items=0 ppid=1 pid=6719 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 230.091176] audit: type=1327 audit(1793107234.480:916): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 230.100151] audit: type=1105 audit(1793107234.508:917): pid=6719 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 230.108350] audit: type=1103 audit(1793107234.516:918): pid=6723 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 230.919404] audit: type=1106 audit(1793107235.327:919): pid=6719 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success' [ 230.926492] audit: type=1104 audit(1793107235.327:920): pid=6719 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=98.64.94.113 addr=98.64.94.113 terminal=ssh res=success'