4): prog-id=113 op=UNLOAD [ 85.622288] audit: type=1300 audit(1784612706.307:384): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3949 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.628241] audit: type=1327 audit(1784612706.307:384): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163316661653737666261666238353736366534613664633731333736 [ 85.636159] audit: type=1334 audit(1784612706.310:385): prog-id=114 op=LOAD [ 85.643552] audit: type=1300 audit(1784612706.310:385): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2ce765032290 a2=98 a3=0 items=0 ppid=3949 pid=3960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 85.649484] audit: type=1327 audit(1784612706.310:385): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163316661653737666261666238353736366534613664633731333736 [ 92.684130] kauditd_printk_skb: 202 callbacks suppressed [ 92.684134] audit: type=1334 audit(1784612713.382:454): prog-id=125 op=LOAD [ 92.687230] audit: type=1334 audit(1784612713.382:455): prog-id=126 op=LOAD [ 92.688902] audit: type=1300 audit(1784612713.382:455): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=20de31fe5fd8 a2=98 a3=0 items=0 ppid=4024 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.695032] audit: type=1327 audit(1784612713.382:455): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764366434623366663739363536643331666235656639333434653763 [ 92.701263] audit: type=1334 audit(1784612713.382:456): prog-id=126 op=UNLOAD [ 92.702984] audit: type=1300 audit(1784612713.382:456): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4024 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.709508] audit: type=1327 audit(1784612713.382:456): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764366434623366663739363536643331666235656639333434653763 [ 92.715507] audit: type=1334 audit(1784612713.382:457): prog-id=127 op=LOAD [ 92.717141] audit: type=1300 audit(1784612713.382:457): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=20de31fe6290 a2=98 a3=0 items=0 ppid=4024 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 92.722895] audit: type=1327 audit(1784612713.382:457): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764366434623366663739363536643331666235656639333434653763 [ 100.443707] kauditd_printk_skb: 12 callbacks suppressed [ 100.443711] audit: type=1106 audit(1784612721.141:462): pid=2696 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 100.454563] audit: type=1104 audit(1784612721.141:463): pid=2696 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 100.605024] audit: type=1106 audit(1784612721.303:464): pid=2691 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 100.620825] audit: type=1104 audit(1784612721.310:465): pid=2691 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 100.634753] audit: type=1131 audit(1784612721.314:466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4099-172.31.17.103:22-20.103.240.199:56430 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 103.779534] audit: type=1325 audit(1784612724.475:467): table=filter:103 family=2 entries=15 op=nft_register_rule pid=4285 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.785092] audit: type=1300 audit(1784612724.475:467): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe77e8dce0 a2=0 a3=7ffe77e8dccc items=0 ppid=3998 pid=4285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 103.795785] audit: type=1327 audit(1784612724.475:467): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 103.799826] audit: type=1325 audit(1784612724.488:468): table=nat:104 family=2 entries=12 op=nft_register_rule pid=4285 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 103.803950] audit: type=1300 audit(1784612724.488:468): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe77e8dce0 a2=0 a3=0 items=0 ppid=3998 pid=4285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.721218] kauditd_printk_skb: 7 callbacks suppressed [ 105.721222] audit: type=1334 audit(1784612726.419:471): prog-id=130 op=LOAD [ 105.728987] audit: type=1334 audit(1784612726.423:472): prog-id=131 op=LOAD [ 105.731911] audit: type=1300 audit(1784612726.423:472): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=38b59e4c1fd8 a2=98 a3=0 items=0 ppid=4300 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.743319] audit: type=1327 audit(1784612726.423:472): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230353834633733393666663538616365306161663634626339396636 [ 105.761795] audit: type=1334 audit(1784612726.423:473): prog-id=131 op=UNLOAD [ 105.764981] audit: type=1300 audit(1784612726.423:473): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4300 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.775787] audit: type=1327 audit(1784612726.423:473): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230353834633733393666663538616365306161663634626339396636 [ 105.787843] audit: type=1334 audit(1784612726.424:474): prog-id=132 op=LOAD [ 105.791809] audit: type=1300 audit(1784612726.424:474): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=38b59e4c2290 a2=98 a3=0 items=0 ppid=4300 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 105.806665] audit: type=1327 audit(1784612726.424:474): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230353834633733393666663538616365306161663634626339396636 [ 111.306156] kauditd_printk_skb: 56 callbacks suppressed [ 111.306160] audit: type=1334 audit(1784612732.004:495): prog-id=143 op=LOAD [ 111.309281] audit: type=1334 audit(1784612732.007:496): prog-id=144 op=LOAD [ 111.311450] audit: type=1300 audit(1784612732.007:496): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1f4f5bbb1fd8 a2=98 a3=0 items=0 ppid=4300 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.317288] audit: type=1327 audit(1784612732.007:496): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766346634656662613463393733636638306335303437393766623234 [ 111.323050] audit: type=1334 audit(1784612732.007:497): prog-id=144 op=UNLOAD [ 111.324664] audit: type=1300 audit(1784612732.007:497): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4300 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.330686] audit: type=1327 audit(1784612732.007:497): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766346634656662613463393733636638306335303437393766623234 [ 111.336802] audit: type=1334 audit(1784612732.007:498): prog-id=145 op=LOAD [ 111.338401] audit: type=1300 audit(1784612732.007:498): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1f4f5bbb2290 a2=98 a3=0 items=0 ppid=4300 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.344806] audit: type=1327 audit(1784612732.007:498): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766346634656662613463393733636638306335303437393766623234 [ 122.285678] kauditd_printk_skb: 18 callbacks suppressed [ 122.285682] audit: type=1334 audit(1784612742.983:505): prog-id=148 op=LOAD [ 122.288407] audit: type=1300 audit(1784612742.983:505): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=c9149ab2290 a2=98 a3=0 items=0 ppid=4399 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.293817] audit: type=1327 audit(1784612742.983:505): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562363932306165376139386633666632646562383938643863353932 [ 122.302312] audit: type=1334 audit(1784612742.983:506): prog-id=149 op=LOAD [ 122.303796] audit: type=1300 audit(1784612742.983:506): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=c9149ab1fe8 a2=98 a3=0 items=0 ppid=4399 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.309928] audit: type=1327 audit(1784612742.983:506): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562363932306165376139386633666632646562383938643863353932 [ 122.315995] audit: type=1334 audit(1784612742.983:507): prog-id=149 op=UNLOAD [ 122.317513] audit: type=1300 audit(1784612742.983:507): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4399 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 122.323268] audit: type=1327 audit(1784612742.983:507): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562363932306165376139386633666632646562383938643863353932 [ 122.331884] audit: type=1334 audit(1784612742.983:508): prog-id=148 op=UNLOAD [ 128.337483] kauditd_printk_skb: 6 callbacks suppressed [ 128.337487] audit: type=1334 audit(1784612749.035:511): prog-id=151 op=LOAD [ 128.340689] audit: type=1300 audit(1784612749.035:511): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=206849ab6290 a2=98 a3=0 items=0 ppid=4399 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.349247] audit: type=1327 audit(1784612749.035:511): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638643337393964336138313737633732396537393236313166363462 [ 128.356149] audit: type=1334 audit(1784612749.035:512): prog-id=152 op=LOAD [ 128.361385] audit: type=1300 audit(1784612749.035:512): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=206849ab5fe8 a2=98 a3=0 items=0 ppid=4399 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.367166] audit: type=1327 audit(1784612749.035:512): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638643337393964336138313737633732396537393236313166363462 [ 128.374937] audit: type=1334 audit(1784612749.035:513): prog-id=152 op=UNLOAD [ 128.376710] audit: type=1300 audit(1784612749.035:513): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4399 pid=4605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.388655] audit: type=1327 audit(1784612749.035:513): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638643337393964336138313737633732396537393236313166363462 [ 128.402313] audit: type=1334 audit(1784612749.035:514): prog-id=151 op=UNLOAD [ 137.437685] kauditd_printk_skb: 21 callbacks suppressed [ 137.437689] audit: type=1334 audit(1784612758.135:522): prog-id=157 op=LOAD [ 137.443205] audit: type=1334 audit(1784612758.139:523): prog-id=158 op=LOAD [ 137.446355] audit: type=1300 audit(1784612758.139:523): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=8ae8e6a9fd8 a2=98 a3=0 items=0 ppid=5049 pid=5065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.456794] audit: type=1327 audit(1784612758.139:523): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236613262353531333038633731613530393061633766323836336564 [ 137.469561] audit: type=1334 audit(1784612758.139:524): prog-id=158 op=UNLOAD [ 137.471064] audit: type=1300 audit(1784612758.139:524): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5049 pid=5065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.480777] audit: type=1327 audit(1784612758.139:524): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236613262353531333038633731613530393061633766323836336564 [ 137.491850] audit: type=1334 audit(1784612758.139:525): prog-id=159 op=LOAD [ 137.493283] audit: type=1300 audit(1784612758.139:525): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=8ae8e6aa290 a2=98 a3=0 items=0 ppid=5049 pid=5065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.499483] audit: type=1327 audit(1784612758.139:525): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236613262353531333038633731613530393061633766323836336564 This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:00 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:00 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 ip-172-31-17-103 login: [ 142.441854] kauditd_printk_skb: 229 callbacks suppressed [ 142.441858] audit: type=1334 audit(1784612763.139:603): prog-id=200 op=LOAD [ 142.444608] audit: type=1300 audit(1784612763.139:603): arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffd5de28480 a2=94 a3=4 items=0 ppid=5007 pid=5236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.451955] audit: type=1327 audit(1784612763.139:603): proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 [ 142.462401] audit: type=1334 audit(1784612763.140:604): prog-id=200 op=UNLOAD [ 142.463974] audit: type=1300 audit(1784612763.140:604): arch=c000003e syscall=3 success=yes exit=0 a0=5 a1=7ffd5de28480 a2=0 a3=4 items=0 ppid=5007 pid=5236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.482981] audit: type=1327 audit(1784612763.140:604): proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 [ 142.495239] audit: type=1334 audit(1784612763.140:605): prog-id=201 op=LOAD [ 142.496952] audit: type=1300 audit(1784612763.140:605): arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd5de282e0 a2=94 a3=5 items=0 ppid=5007 pid=5236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) [ 142.507276] audit: type=1327 audit(1784612763.140:605): proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 [ 142.526570] audit: type=1334 audit(1784612763.140:606): prog-id=201 op=UNLOAD This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:03 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:03 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 ip-172-31-17-103 login: This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:05 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:05 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 ip-172-31-17-103 login: This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:07 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:07 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 ip-172-31-17-103 login: This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:08 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:08 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 ip-172-31-17-103 login: [ 147.648395] kauditd_printk_skb: 294 callbacks suppressed [ 147.648400] audit: type=1325 audit(1784612768.346:711): table=filter:128 family=2 entries=16 op=nft_register_rule pid=5975 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.652610] audit: type=1300 audit(1784612768.346:711): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffa26723b0 a2=0 a3=7fffa267239c items=0 ppid=3998 pid=5975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.658201] audit: type=1327 audit(1784612768.346:711): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 147.672399] audit: type=1325 audit(1784612768.370:712): table=nat:129 family=2 entries=54 op=nft_register_chain pid=5975 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 147.676428] audit: type=1300 audit(1784612768.370:712): arch=c000003e syscall=46 success=yes exit=23436 a0=3 a1=7fffa26723b0 a2=0 a3=7fffa267239c items=0 ppid=3998 pid=5975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 147.682029] audit: type=1327 audit(1784612768.370:712): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:09 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:09 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 ip-172-31-17-103 login: [ 148.649997] audit: type=1334 audit(1784612769.347:713): prog-id=255 op=LOAD [ 148.653297] audit: type=1300 audit(1784612769.347:713): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=3f691a2b2290 a2=98 a3=0 items=0 ppid=5423 pid=6002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.659932] audit: type=1327 audit(1784612769.347:713): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033643366323130316632373433356362663536653061333831633837 [ 148.666647] audit: type=1334 audit(1784612769.347:714): prog-id=256 op=LOAD This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:10 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 This is ip-172-31-17-103 (Linux x86_64 6.12.96-flatcar) 05:46:10 SSH host key: SHA256:ZPdAGXMqqpczRLJEVQtmjWWNCX491c3lgU42SZjRaLI (ED25519) SSH host key: SHA256:Sr3Hd5IVQ9b4iEMEUPwGpXoEuIGP7iPaKsmtXpYEWHE (RSA) SSH host key: SHA256:sGIRdPDOs+uZG3V6ZJUXsqQZLL2sszi55Azerlvs53g (ECDSA) eth0: 172.31.17.103 fe80::4bb:31ff:fe6f:b3b1 ip-172-31-17-103 login: [ 154.163767] kauditd_printk_skb: 39 callbacks suppressed [ 154.163770] audit: type=1325 audit(1784612774.861:728): table=filter:132 family=2 entries=11 op=nft_register_rule pid=6097 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.170258] audit: type=1300 audit(1784612774.861:728): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffdcb0545f0 a2=0 a3=7ffdcb0545dc items=0 ppid=3998 pid=6097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.176372] audit: type=1327 audit(1784612774.861:728): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 154.179630] audit: type=1325 audit(1784612774.870:729): table=nat:133 family=2 entries=29 op=nft_register_chain pid=6097 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 154.182984] audit: type=1300 audit(1784612774.870:729): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffdcb0545f0 a2=0 a3=7ffdcb0545dc items=0 ppid=3998 pid=6097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.190820] audit: type=1327 audit(1784612774.870:729): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 159.365768] audit: type=1334 audit(1784612780.063:730): prog-id=263 op=LOAD [ 159.367641] audit: type=1334 audit(1784612780.064:731): prog-id=264 op=LOAD [ 159.369046] audit: type=1300 audit(1784612780.064:731): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3792f26b1fd8 a2=98 a3=0 items=0 ppid=5508 pid=6111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.375150] audit: type=1327 audit(1784612780.064:731): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966633265643034613664346431343232633566646133323463643039 [ 159.381133] audit: type=1334 audit(1784612780.065:732): prog-id=264 op=UNLOAD [ 159.382576] audit: type=1300 audit(1784612780.065:732): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5508 pid=6111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.388604] audit: type=1327 audit(1784612780.065:732): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966633265643034613664346431343232633566646133323463643039 [ 159.394563] audit: type=1334 audit(1784612780.065:733): prog-id=265 op=LOAD [ 159.396000] audit: type=1300 audit(1784612780.065:733): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3792f26b2290 a2=98 a3=0 items=0 ppid=5508 pid=6111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 159.402449] audit: type=1327 audit(1784612780.065:733): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966633265643034613664346431343232633566646133323463643039 [ 165.693205] kauditd_printk_skb: 23 callbacks suppressed [ 165.693209] audit: type=1334 audit(1784612786.391:747): prog-id=268 op=LOAD [ 165.695696] audit: type=1334 audit(1784612786.393:748): prog-id=269 op=LOAD [ 165.697153] audit: type=1300 audit(1784612786.393:748): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3ef34b831fd8 a2=98 a3=0 items=0 ppid=5574 pid=6269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.702976] audit: type=1327 audit(1784612786.393:748): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964626166323831616237316238383262653835393735366664306464 [ 165.708771] audit: type=1334 audit(1784612786.393:749): prog-id=269 op=UNLOAD [ 165.710254] audit: type=1300 audit(1784612786.393:749): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5574 pid=6269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.716120] audit: type=1327 audit(1784612786.393:749): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964626166323831616237316238383262653835393735366664306464 [ 165.722056] audit: type=1334 audit(1784612786.393:750): prog-id=270 op=LOAD [ 165.723683] audit: type=1300 audit(1784612786.393:750): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3ef34b832290 a2=98 a3=0 items=0 ppid=5574 pid=6269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.730053] audit: type=1327 audit(1784612786.393:750): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964626166323831616237316238383262653835393735366664306464 [ 171.624695] kauditd_printk_skb: 75 callbacks suppressed [ 171.624699] audit: type=1106 audit(1784612792.322:780): pid=6402 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 171.633212] audit: type=1104 audit(1784612792.322:781): pid=6402 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 171.655269] audit: type=1131 audit(1784612792.353:782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-4100-172.31.17.103:22-20.103.240.199:39448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.475763] audit: type=1325 audit(1784612794.168:783): table=filter:140 family=2 entries=109 op=nft_register_chain pid=6499 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 173.480113] audit: type=1300 audit(1784612794.168:783): arch=c000003e syscall=46 success=yes exit=48476 a0=3 a1=7ffd1a444760 a2=0 a3=7ffd1a44474c items=0 ppid=5007 pid=6499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.487679] audit: type=1327 audit(1784612794.168:783): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 176.791778] audit: type=1130 audit(1784612797.488:784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-6-172.31.17.103:22-20.103.240.199:41906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 177.035637] audit: type=1325 audit(1784612797.733:785): table=filter:141 family=2 entries=117 op=nft_register_chain pid=6524 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 177.038606] audit: type=1300 audit(1784612797.733:785): arch=c000003e syscall=46 success=yes exit=53712 a0=3 a1=7ffec8fa9d80 a2=0 a3=7ffec8fa9d6c items=0 ppid=5007 pid=6524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.045322] audit: type=1327 audit(1784612797.733:785): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 177.768861] audit: type=1101 audit(1784612798.467:786): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 177.775349] audit: type=1103 audit(1784612798.467:787): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 177.781202] audit: type=1006 audit(1784612798.467:788): pid=6505 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 177.784626] audit: type=1300 audit(1784612798.467:788): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe8483c320 a2=3 a3=0 items=0 ppid=1 pid=6505 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 177.790891] audit: type=1327 audit(1784612798.467:788): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 177.802495] audit: type=1105 audit(1784612798.500:789): pid=6505 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 183.891071] kauditd_printk_skb: 4 callbacks suppressed [ 183.891075] audit: type=1130 audit(1784612804.588:794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-7-172.31.17.103:22-20.103.240.199:44086 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 184.859520] audit: type=1101 audit(1784612805.557:795): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 184.865848] audit: type=1103 audit(1784612805.560:796): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 184.872405] audit: type=1006 audit(1784612805.560:797): pid=6587 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 184.876084] audit: type=1300 audit(1784612805.560:797): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff446de1d0 a2=3 a3=0 items=0 ppid=1 pid=6587 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 184.882440] audit: type=1327 audit(1784612805.560:797): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 184.888558] audit: type=1105 audit(1784612805.586:798): pid=6587 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 184.896147] audit: type=1103 audit(1784612805.594:799): pid=6591 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 185.585034] audit: type=1106 audit(1784612806.283:800): pid=6587 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 185.592993] audit: type=1104 audit(1784612806.283:801): pid=6587 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 189.013871] kauditd_printk_skb: 20 callbacks suppressed [ 189.013876] audit: type=1106 audit(1784612809.712:818): pid=6625 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 189.029095] audit: type=1104 audit(1784612809.712:819): pid=6625 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 189.035319] audit: type=1131 audit(1784612809.718:820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-4101-172.31.17.103:22-20.103.240.199:44092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.109190] audit: type=1325 audit(1784612809.804:821): table=filter:142 family=2 entries=124 op=nft_register_chain pid=6654 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 189.113408] audit: type=1300 audit(1784612809.804:821): arch=c000003e syscall=46 success=yes exit=59176 a0=3 a1=7ffd1fe1a1e0 a2=0 a3=7ffd1fe1a1cc items=0 ppid=5007 pid=6654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.119609] audit: type=1327 audit(1784612809.804:821): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 189.216755] audit: type=1325 audit(1784612809.914:822): table=filter:143 family=2 entries=65 op=nft_register_chain pid=6663 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 189.223753] audit: type=1300 audit(1784612809.914:822): arch=c000003e syscall=46 success=yes exit=31592 a0=3 a1=7ffe79b03430 a2=0 a3=7ffe79b0341c items=0 ppid=5007 pid=6663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.232809] audit: type=1327 audit(1784612809.914:822): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 189.294581] audit: type=1325 audit(1784612809.991:823): table=filter:144 family=2 entries=246 op=nft_register_chain pid=6672 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 194.178148] kauditd_printk_skb: 2 callbacks suppressed [ 194.178151] audit: type=1130 audit(1784612814.876:824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-9-172.31.17.103:22-20.103.240.199:49930 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.064205] audit: type=1101 audit(1784612815.762:825): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 195.070454] audit: type=1103 audit(1784612815.765:826): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 195.077422] audit: type=1006 audit(1784612815.766:827): pid=6699 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 195.080578] audit: type=1300 audit(1784612815.766:827): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff6ee77a30 a2=3 a3=0 items=0 ppid=1 pid=6699 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.086757] audit: type=1327 audit(1784612815.766:827): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 195.104747] audit: type=1105 audit(1784612815.802:828): pid=6699 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 195.111985] audit: type=1103 audit(1784612815.805:829): pid=6732 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.192512] audit: type=1106 audit(1784612816.890:830): pid=6699 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.203633] audit: type=1104 audit(1784612816.901:831): pid=6699 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 199.466565] kauditd_printk_skb: 13 callbacks suppressed [ 199.466569] audit: type=1101 audit(1784612820.164:843): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 199.515033] audit: type=1103 audit(1784612820.177:844): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 199.521384] audit: type=1006 audit(1784612820.177:845): pid=6762 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 199.534785] audit: type=1300 audit(1784612820.177:845): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffdb5c49400 a2=3 a3=0 items=0 ppid=1 pid=6762 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 199.541960] audit: type=1327 audit(1784612820.177:845): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 199.565028] audit: type=1105 audit(1784612820.263:846): pid=6762 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 199.576989] audit: type=1103 audit(1784612820.275:847): pid=6796 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 200.403388] audit: type=1325 audit(1784612821.100:848): table=filter:145 family=2 entries=9 op=nft_register_rule pid=6808 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 200.413985] audit: type=1300 audit(1784612821.100:848): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdd7b738f0 a2=0 a3=7ffdd7b738dc items=0 ppid=3998 pid=6808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.420910] audit: type=1327 audit(1784612821.100:848): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 204.875155] kauditd_printk_skb: 20 callbacks suppressed [ 204.875159] audit: type=1106 audit(1784612825.573:861): pid=6826 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.883375] audit: type=1104 audit(1784612825.573:862): pid=6826 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 204.890018] audit: type=1131 audit(1784612825.580:863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-11-172.31.17.103:22-20.103.240.199:44872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.038214] audit: type=1130 audit(1784612825.736:864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-12-172.31.17.103:22-20.103.240.199:44876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.962038] audit: type=1101 audit(1784612826.660:865): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 205.968259] audit: type=1103 audit(1784612826.660:866): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 205.974681] audit: type=1006 audit(1784612826.660:867): pid=6840 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 [ 205.978071] audit: type=1300 audit(1784612826.660:867): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffc0bc9820 a2=3 a3=0 items=0 ppid=1 pid=6840 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 205.984342] audit: type=1327 audit(1784612826.660:867): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 205.998395] audit: type=1105 audit(1784612826.696:868): pid=6840 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 211.747070] kauditd_printk_skb: 10 callbacks suppressed [ 211.747075] audit: type=1130 audit(1784612832.445:875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-13-172.31.17.103:22-20.103.240.199:34952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 212.652511] audit: type=1101 audit(1784612833.350:876): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 212.659247] audit: type=1103 audit(1784612833.350:877): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 212.664707] audit: type=1006 audit(1784612833.350:878): pid=6867 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 212.667690] audit: type=1300 audit(1784612833.350:878): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd29b90720 a2=3 a3=0 items=0 ppid=1 pid=6867 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 212.674365] audit: type=1327 audit(1784612833.350:878): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 212.687555] audit: type=1105 audit(1784612833.385:879): pid=6867 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 212.695171] audit: type=1103 audit(1784612833.393:880): pid=6871 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 213.248578] audit: type=1106 audit(1784612833.946:881): pid=6867 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 213.255847] audit: type=1104 audit(1784612833.947:882): pid=6867 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 218.421916] kauditd_printk_skb: 1 callbacks suppressed [ 218.421920] audit: type=1130 audit(1784612839.120:884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-14-172.31.17.103:22-20.103.240.199:34968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 219.444746] audit: type=1101 audit(1784612840.142:885): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 219.452294] audit: type=1103 audit(1784612840.143:886): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 219.458808] audit: type=1006 audit(1784612840.143:887): pid=6884 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 219.462013] audit: type=1300 audit(1784612840.143:887): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc09d744c0 a2=3 a3=0 items=0 ppid=1 pid=6884 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 219.468109] audit: type=1327 audit(1784612840.143:887): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 219.483916] audit: type=1105 audit(1784612840.182:888): pid=6884 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 219.492708] audit: type=1103 audit(1784612840.185:889): pid=6888 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 220.364784] audit: type=1106 audit(1784612841.063:890): pid=6884 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 220.374051] audit: type=1104 audit(1784612841.063:891): pid=6884 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 225.532870] kauditd_printk_skb: 1 callbacks suppressed [ 225.532875] audit: type=1130 audit(1784612846.230:893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-15-172.31.17.103:22-20.103.240.199:52140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 226.440072] audit: type=1101 audit(1784612847.138:894): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.454974] audit: type=1103 audit(1784612847.149:895): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.466744] audit: type=1006 audit(1784612847.149:896): pid=6962 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 226.471738] audit: type=1300 audit(1784612847.149:896): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc528249e0 a2=3 a3=0 items=0 ppid=1 pid=6962 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 226.482742] audit: type=1327 audit(1784612847.149:896): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 226.490876] audit: type=1105 audit(1784612847.188:897): pid=6962 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 226.501509] audit: type=1103 audit(1784612847.196:898): pid=6993 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 227.694224] audit: type=1106 audit(1784612848.392:899): pid=6962 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 227.705736] audit: type=1104 audit(1784612848.402:900): pid=6962 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 232.861641] kauditd_printk_skb: 1 callbacks suppressed [ 232.861644] audit: type=1130 audit(1784612853.559:902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-16-172.31.17.103:22-20.103.240.199:44870 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 233.870384] audit: type=1101 audit(1784612854.568:903): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 233.882156] audit: type=1103 audit(1784612854.577:904): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 233.890197] audit: type=1006 audit(1784612854.577:905): pid=7060 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 233.894943] audit: type=1300 audit(1784612854.577:905): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe6d4ce760 a2=3 a3=0 items=0 ppid=1 pid=7060 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 233.916892] audit: type=1327 audit(1784612854.577:905): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 233.923184] audit: type=1105 audit(1784612854.620:906): pid=7060 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 233.931240] audit: type=1103 audit(1784612854.629:907): pid=7064 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 234.878328] audit: type=1106 audit(1784612855.576:908): pid=7060 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 234.885288] audit: type=1104 audit(1784612855.576:909): pid=7060 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 248.957210] kauditd_printk_skb: 1 callbacks suppressed [ 248.957215] audit: type=1334 audit(1784612869.655:911): prog-id=125 op=UNLOAD [ 248.960812] audit: type=1334 audit(1784612869.655:912): prog-id=129 op=UNLOAD [ 250.093258] audit: type=1334 audit(1784612870.791:913): prog-id=80 op=UNLOAD [ 250.097608] audit: type=1334 audit(1784612870.791:914): prog-id=94 op=UNLOAD [ 250.300657] audit: type=1334 audit(1784612870.998:915): prog-id=281 op=LOAD [ 250.303076] audit: type=1334 audit(1784612871.001:916): prog-id=282 op=LOAD [ 250.306922] audit: type=1300 audit(1784612871.001:916): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=3883e57d3fd8 a2=98 a3=0 items=0 ppid=4024 pid=7146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 250.319895] audit: type=1327 audit(1784612871.001:916): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138306564363834343165633332383331636663613962653038336161 [ 250.329851] audit: type=1334 audit(1784612871.002:917): prog-id=282 op=UNLOAD [ 250.332064] audit: type=1300 audit(1784612871.002:917): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4024 pid=7146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 255.611757] kauditd_printk_skb: 38 callbacks suppressed [ 255.611761] audit: type=1334 audit(1784612876.310:931): prog-id=75 op=UNLOAD [ 255.614946] audit: type=1334 audit(1784612876.310:932): prog-id=99 op=UNLOAD [ 256.033667] audit: type=1334 audit(1784612876.731:933): prog-id=291 op=LOAD [ 256.035930] audit: type=1334 audit(1784612876.733:934): prog-id=292 op=LOAD [ 256.037439] audit: type=1300 audit(1784612876.733:934): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=309523331fd8 a2=98 a3=0 items=0 ppid=3379 pid=7271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 256.042850] audit: type=1327 audit(1784612876.733:934): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462326566393230343363383136626532646639396133636265306431 [ 256.048014] audit: type=1334 audit(1784612876.733:935): prog-id=292 op=UNLOAD [ 256.049593] audit: type=1300 audit(1784612876.733:935): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3379 pid=7271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 256.055624] audit: type=1327 audit(1784612876.733:935): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462326566393230343363383136626532646639396133636265306431 [ 256.061768] audit: type=1334 audit(1784612876.734:936): prog-id=293 op=LOAD [ 273.393876] kauditd_printk_skb: 14 callbacks suppressed [ 273.393880] audit: type=1106 audit(1784612894.092:941): pid=2583 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 273.401235] audit: type=1104 audit(1784612894.093:942): pid=2583 uid=0 auid=500 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 273.418346] audit: type=1131 audit(1784612894.115:943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-1-172.31.17.103:22-20.103.240.199:47280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 273.859633] audit: type=1131 audit(1784612894.556:944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=coreos-metadata-sshkeys@core comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 273.899375] audit: type=1131 audit(1784612894.597:945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=nvidia comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 273.921578] audit: type=1131 audit(1784612894.611:946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=prepare-helm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 273.939850] audit: type=1131 audit(1784612894.625:947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd-keygen comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 273.965155] audit: type=1131 audit(1784612894.626:948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshkeys comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 273.979880] audit: type=1131 audit(1784612894.632:949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 274.022229] audit: type=1131 audit(1784612894.676:950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-load-credentials comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'