dit: type=1334 audit(1786513310.022:393): prog-id=119 op=LOAD [ 95.375624] audit: type=1300 audit(1786513310.022:393): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=17a55518df90 a2=98 a3=0 items=0 ppid=4078 pid=4089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.382054] audit: type=1327 audit(1786513310.022:393): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862353762663330663564643265646337366630313064353362366562 [ 95.389310] audit: type=1334 audit(1786513310.025:394): prog-id=119 op=UNLOAD [ 95.391621] audit: type=1300 audit(1786513310.025:394): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4078 pid=4089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.398147] audit: type=1327 audit(1786513310.025:394): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862353762663330663564643265646337366630313064353362366562 [ 95.405516] audit: type=1334 audit(1786513310.025:395): prog-id=120 op=LOAD [ 95.410119] audit: type=1300 audit(1786513310.025:395): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=17a55518e268 a2=98 a3=0 items=0 ppid=4078 pid=4089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 95.420705] audit: type=1327 audit(1786513310.025:395): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862353762663330663564643265646337366630313064353362366562 [ 105.891767] kauditd_printk_skb: 224 callbacks suppressed [ 105.891773] audit: type=1106 audit(1786513320.541:472): pid=2770 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 105.897973] audit: type=1104 audit(1786513320.541:473): pid=2770 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 106.063195] audit: type=1106 audit(1786513320.712:474): pid=2750 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 106.070347] audit: type=1104 audit(1786513320.712:475): pid=2750 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 106.077003] audit: type=1131 audit(1786513320.721:476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4100-172.31.22.106:22-20.103.240.199:45634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 113.565951] audit: type=1325 audit(1786513328.215:477): table=filter:98 family=2 entries=15 op=nft_register_rule pid=4410 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 113.571136] audit: type=1300 audit(1786513328.215:477): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff4f31d90 a2=0 a3=1 items=0 ppid=4168 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.578851] audit: type=1327 audit(1786513328.215:477): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 113.584002] audit: type=1325 audit(1786513328.233:478): table=nat:99 family=2 entries=12 op=nft_register_rule pid=4410 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 113.587167] audit: type=1300 audit(1786513328.233:478): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff4f31d90 a2=0 a3=1 items=0 ppid=4168 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.594836] audit: type=1327 audit(1786513328.233:478): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 114.634343] audit: type=1325 audit(1786513329.284:479): table=filter:100 family=2 entries=18 op=nft_register_rule pid=4412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 114.643121] audit: type=1300 audit(1786513329.284:479): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff4965d10 a2=0 a3=1 items=0 ppid=4168 pid=4412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 114.652908] audit: type=1327 audit(1786513329.284:479): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 114.658922] audit: type=1325 audit(1786513329.308:480): table=nat:101 family=2 entries=12 op=nft_register_rule pid=4412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 119.640566] kauditd_printk_skb: 58 callbacks suppressed [ 119.640572] audit: type=1334 audit(1786513334.290:501): prog-id=146 op=LOAD [ 119.644166] audit: type=1300 audit(1786513334.290:501): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=516217854268 a2=98 a3=0 items=0 ppid=4480 pid=4604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.650937] audit: type=1327 audit(1786513334.290:501): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334353966303039326636336230313137666339663864383366323630 [ 119.660937] audit: type=1334 audit(1786513334.290:502): prog-id=147 op=LOAD [ 119.663345] audit: type=1300 audit(1786513334.290:502): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=516217853fa8 a2=98 a3=0 items=0 ppid=4480 pid=4604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.670268] audit: type=1327 audit(1786513334.290:502): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334353966303039326636336230313137666339663864383366323630 [ 119.676791] audit: type=1334 audit(1786513334.290:503): prog-id=147 op=UNLOAD [ 119.679704] audit: type=1300 audit(1786513334.290:503): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4480 pid=4604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 119.686544] audit: type=1327 audit(1786513334.290:503): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334353966303039326636336230313137666339663864383366323630 [ 119.695887] audit: type=1334 audit(1786513334.290:504): prog-id=146 op=UNLOAD [ 130.139454] kauditd_printk_skb: 34 callbacks suppressed [ 130.139471] audit: type=1334 audit(1786513344.789:517): prog-id=154 op=LOAD [ 130.143346] audit: type=1300 audit(1786513344.789:517): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=581ac41fa268 a2=98 a3=0 items=0 ppid=4480 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.149948] audit: type=1327 audit(1786513344.789:517): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831643934386666393866653261623039613231333164653438343561 [ 130.156408] audit: type=1334 audit(1786513344.793:518): prog-id=155 op=LOAD [ 130.160020] audit: type=1300 audit(1786513344.793:518): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=581ac41f9fa8 a2=98 a3=0 items=0 ppid=4480 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.169860] audit: type=1327 audit(1786513344.793:518): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831643934386666393866653261623039613231333164653438343561 [ 130.177322] audit: type=1334 audit(1786513344.793:519): prog-id=155 op=UNLOAD [ 130.180146] audit: type=1300 audit(1786513344.793:519): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4480 pid=4703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.186759] audit: type=1327 audit(1786513344.793:519): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831643934386666393866653261623039613231333164653438343561 [ 130.198725] audit: type=1334 audit(1786513344.793:520): prog-id=154 op=UNLOAD [ 136.049974] kauditd_printk_skb: 21 callbacks suppressed [ 136.049980] audit: type=1334 audit(1786513350.699:528): prog-id=159 op=UNLOAD [ 137.797461] audit: type=1334 audit(1786513352.446:529): prog-id=160 op=LOAD [ 137.799377] audit: type=1300 audit(1786513352.446:529): arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=71248b0b2268 a2=98 a3=0 items=0 ppid=4480 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.806012] audit: type=1327 audit(1786513352.446:529): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465323162653135363963313661663935613237663232326438393539 [ 137.813743] audit: type=1334 audit(1786513352.446:530): prog-id=161 op=LOAD [ 137.816305] audit: type=1300 audit(1786513352.446:530): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=71248b0b1fa8 a2=98 a3=0 items=0 ppid=4480 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.823579] audit: type=1327 audit(1786513352.446:530): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465323162653135363963313661663935613237663232326438393539 [ 137.830401] audit: type=1334 audit(1786513352.446:531): prog-id=161 op=UNLOAD [ 137.832076] audit: type=1300 audit(1786513352.446:531): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=4480 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 137.838289] audit: type=1327 audit(1786513352.446:531): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465323162653135363963313661663935613237663232326438393539 [ 143.388342] kauditd_printk_skb: 6 callbacks suppressed [ 143.388348] audit: type=1334 audit(1786513358.037:534): prog-id=163 op=LOAD [ 143.393359] audit: type=1334 audit(1786513358.042:535): prog-id=164 op=LOAD [ 143.395269] audit: type=1300 audit(1786513358.042:535): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=687f37f29f90 a2=98 a3=0 items=0 ppid=5156 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.401712] audit: type=1327 audit(1786513358.042:535): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638666431656538633034666363383161383032656339633639613939 [ 143.407860] audit: type=1334 audit(1786513358.042:536): prog-id=164 op=UNLOAD [ 143.409727] audit: type=1300 audit(1786513358.042:536): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5156 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.416754] audit: type=1327 audit(1786513358.042:536): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638666431656538633034666363383161383032656339633639613939 [ 143.423101] audit: type=1334 audit(1786513358.042:537): prog-id=165 op=LOAD [ 143.424814] audit: type=1300 audit(1786513358.042:537): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=687f37f2a268 a2=98 a3=0 items=0 ppid=5156 pid=5167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.432298] audit: type=1327 audit(1786513358.042:537): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638666431656538633034666363383161383032656339633639613939 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:40 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:40 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 ip-172-31-22-106 login: This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:41 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:41 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 ip-172-31-22-106 login: [ 148.496791] kauditd_printk_skb: 299 callbacks suppressed [ 148.496797] audit: type=1325 audit(1786513363.145:639): table=filter:113 family=2 entries=19 op=nft_register_rule pid=5457 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 148.504242] audit: type=1300 audit(1786513363.145:639): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffcc0338b0 a2=0 a3=1 items=0 ppid=4168 pid=5457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.513098] audit: type=1327 audit(1786513363.145:639): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 148.516177] audit: type=1325 audit(1786513363.161:640): table=nat:114 family=2 entries=21 op=nft_register_chain pid=5457 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 148.519537] audit: type=1300 audit(1786513363.161:640): arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffcc0338b0 a2=0 a3=1 items=0 ppid=4168 pid=5457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.526169] audit: type=1327 audit(1786513363.161:640): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:43 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:43 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 ip-172-31-22-106 login: [ 149.762198] audit: type=1334 audit(1786513364.411:641): prog-id=216 op=LOAD [ 149.764839] audit: type=1334 audit(1786513364.411:642): prog-id=217 op=LOAD [ 149.767729] audit: type=1300 audit(1786513364.411:642): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=107426f0df90 a2=98 a3=0 items=0 ppid=5517 pid=5531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 149.778276] audit: type=1327 audit(1786513364.411:642): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634333934393236303464383032663662386130643933393363656162 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:46 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:46 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 ip-172-31-22-106 login: This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:47 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:47 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 ip-172-31-22-106 login: [ 153.503849] kauditd_printk_skb: 145 callbacks suppressed [ 153.503855] audit: type=1325 audit(1786513368.152:694): table=calico-arp:128 family=3 entries=6 op=nft_register_chain pid=6030 subj=system_u:system_r:kernel_t:s0 comm="nft" [ 153.511414] audit: type=1300 audit(1786513368.152:694): arch=c00000b7 syscall=211 success=yes exit=1424 a0=3 a1=fffff4f4e1c8 a2=0 a3=ffff834de020 items=0 ppid=5210 pid=6030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nft" exe="/usr/sbin/nft" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.522043] audit: type=1327 audit(1786513368.152:694): proctitle=2F7573722F7362696E2F6E6674002D66002D [ 153.649662] audit: type=1334 audit(1786513368.298:695): prog-id=241 op=LOAD [ 153.659662] audit: type=1334 audit(1786513368.306:696): prog-id=242 op=LOAD [ 153.662449] audit: type=1300 audit(1786513368.306:696): arch=c00000b7 syscall=280 success=yes exit=21 a0=5 a1=21f2b421f90 a2=98 a3=0 items=0 ppid=6020 pid=6033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.676481] audit: type=1327 audit(1786513368.306:696): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136343265313136633036633539663531323430313264353834303335 [ 153.689576] audit: type=1334 audit(1786513368.308:697): prog-id=242 op=UNLOAD [ 153.692190] audit: type=1300 audit(1786513368.308:697): arch=c00000b7 syscall=57 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=6020 pid=6033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.700401] audit: type=1327 audit(1786513368.308:697): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136343265313136633036633539663531323430313264353834303335 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:48 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:48 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 ip-172-31-22-106 login: This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:49 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:49 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 ip-172-31-22-106 login: This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:50 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 This is ip-172-31-22-106 (Linux aarch64 6.12.102-flatcar) 05:42:50 SSH host key: SHA256:60fDcYH1sHHyx1jE8VXeA3n1cjwZ3PwU4TQFxF3NX0g (ED25519) SSH host key: SHA256:/lESBNGj9OSuhnS3UlsKEBGmO1W9C2dJ2+GpVy22dSc (RSA) SSH host key: SHA256:hZUMNDMKlQo05Gnxp9XkzVgfmQwnMLEo/UnXYOohMuo (MLDSA44-ED25519) SSH host key: SHA256:3QEp+5M/tRLSx6FMJv0vsQepr6lTMrak+VmWmJnFxBo (ECDSA) eth0: 172.31.22.106 fe80::44a:cbff:fe4c:8d93 ip-172-31-22-106 login: [ 160.035940] kauditd_printk_skb: 127 callbacks suppressed [ 160.035946] audit: type=1334 audit(1786513374.685:743): prog-id=266 op=LOAD [ 160.041281] audit: type=1334 audit(1786513374.685:744): prog-id=267 op=LOAD [ 160.044848] audit: type=1300 audit(1786513374.685:744): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=31c1e16b1f90 a2=98 a3=0 items=0 ppid=5721 pid=6210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 160.054317] audit: type=1327 audit(1786513374.685:744): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134663864383165356361646465313162303835383361323230626563 [ 160.065357] audit: type=1334 audit(1786513374.687:745): prog-id=267 op=UNLOAD [ 160.069042] audit: type=1300 audit(1786513374.687:745): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5721 pid=6210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 160.083856] audit: type=1327 audit(1786513374.687:745): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134663864383165356361646465313162303835383361323230626563 [ 160.094721] audit: type=1334 audit(1786513374.687:746): prog-id=268 op=LOAD [ 160.097309] audit: type=1300 audit(1786513374.687:746): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=31c1e16b2268 a2=98 a3=0 items=0 ppid=5721 pid=6210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 160.104799] audit: type=1327 audit(1786513374.687:746): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134663864383165356361646465313162303835383361323230626563 [ 165.541667] kauditd_printk_skb: 27 callbacks suppressed [ 165.541672] audit: type=1334 audit(1786513380.190:756): prog-id=274 op=LOAD [ 165.546062] audit: type=1334 audit(1786513380.194:757): prog-id=275 op=LOAD [ 165.547591] audit: type=1300 audit(1786513380.194:757): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7b50666ff90 a2=98 a3=0 items=0 ppid=5925 pid=6353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.553914] audit: type=1327 audit(1786513380.194:757): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231663832356538326539646664313938653838666564356563313835 [ 165.559465] audit: type=1334 audit(1786513380.194:758): prog-id=275 op=UNLOAD [ 165.561175] audit: type=1300 audit(1786513380.194:758): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5925 pid=6353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.567014] audit: type=1327 audit(1786513380.194:758): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231663832356538326539646664313938653838666564356563313835 [ 165.572672] audit: type=1334 audit(1786513380.194:759): prog-id=276 op=LOAD [ 165.574119] audit: type=1300 audit(1786513380.194:759): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=7b506670268 a2=98 a3=0 items=0 ppid=5925 pid=6353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 165.580775] audit: type=1327 audit(1786513380.194:759): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231663832356538326539646664313938653838666564356563313835 [ 174.758086] kauditd_printk_skb: 67 callbacks suppressed [ 174.758091] audit: type=1130 audit(1786513389.407:783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-4-172.31.22.106:22-20.103.240.199:52554 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 175.719937] audit: type=1101 audit(1786513390.370:784): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 175.729449] audit: type=1103 audit(1786513390.379:785): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 175.734585] audit: type=1006 audit(1786513390.379:786): pid=6528 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 [ 175.737907] audit: type=1300 audit(1786513390.379:786): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffcc84b7e0 a2=3 a3=0 items=0 ppid=1 pid=6528 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 175.744182] audit: type=1327 audit(1786513390.379:786): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 175.770643] audit: type=1105 audit(1786513390.420:787): pid=6528 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 175.778109] audit: type=1103 audit(1786513390.428:788): pid=6532 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 176.444810] audit: type=1106 audit(1786513391.095:789): pid=6528 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 176.451855] audit: type=1104 audit(1786513391.095:790): pid=6528 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 181.624073] kauditd_printk_skb: 1 callbacks suppressed [ 181.624079] audit: type=1130 audit(1786513396.274:792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-172.31.22.106:22-20.103.240.199:44342 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 182.548713] audit: type=1101 audit(1786513397.198:793): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 182.560747] audit: type=1103 audit(1786513397.206:794): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 182.570347] audit: type=1006 audit(1786513397.206:795): pid=6546 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 182.577270] audit: type=1300 audit(1786513397.206:795): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffedc0cef0 a2=3 a3=0 items=0 ppid=1 pid=6546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 182.591736] audit: type=1327 audit(1786513397.206:795): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 182.633857] audit: type=1105 audit(1786513397.284:796): pid=6546 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 182.645963] audit: type=1103 audit(1786513397.295:797): pid=6550 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 182.710485] audit: type=1325 audit(1786513397.360:798): table=filter:143 family=2 entries=8 op=nft_register_rule pid=6552 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 182.714775] audit: type=1300 audit(1786513397.360:798): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffcb4f0cd0 a2=0 a3=1 items=0 ppid=4168 pid=6552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 188.390825] kauditd_printk_skb: 10 callbacks suppressed [ 188.390830] audit: type=1130 audit(1786513403.041:804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-6-172.31.22.106:22-20.103.240.199:39118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.288928] audit: type=1101 audit(1786513403.939:805): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 189.297041] audit: type=1103 audit(1786513403.947:806): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 189.303440] audit: type=1006 audit(1786513403.948:807): pid=6610 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 189.308039] audit: type=1300 audit(1786513403.948:807): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe2b21250 a2=3 a3=0 items=0 ppid=1 pid=6610 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 189.314622] audit: type=1327 audit(1786513403.948:807): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 189.334079] audit: type=1105 audit(1786513403.984:808): pid=6610 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 189.341671] audit: type=1103 audit(1786513403.991:809): pid=6614 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 189.939500] audit: type=1106 audit(1786513404.589:810): pid=6610 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 189.946419] audit: type=1104 audit(1786513404.590:811): pid=6610 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 195.122149] kauditd_printk_skb: 1 callbacks suppressed [ 195.122155] audit: type=1130 audit(1786513409.772:813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4101-172.31.22.106:22-20.103.240.199:39132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 195.757732] audit: type=1325 audit(1786513410.347:814): table=filter:146 family=2 entries=124 op=nft_register_chain pid=6719 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 195.766386] audit: type=1300 audit(1786513410.347:814): arch=c00000b7 syscall=211 success=yes exit=59176 a0=3 a1=ffffc1fdeae0 a2=0 a3=ffffbaa2d7e0 items=0 ppid=5210 pid=6719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.780900] audit: type=1327 audit(1786513410.347:814): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 195.957376] audit: type=1325 audit(1786513410.605:815): table=filter:147 family=2 entries=65 op=nft_register_chain pid=6751 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 195.963268] audit: type=1300 audit(1786513410.605:815): arch=c00000b7 syscall=211 success=yes exit=31592 a0=3 a1=ffffcf314a50 a2=0 a3=ffffac4f37e0 items=0 ppid=5210 pid=6751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 195.973905] audit: type=1327 audit(1786513410.605:815): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 196.078950] audit: type=1101 audit(1786513410.729:816): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.094729] audit: type=1103 audit(1786513410.738:817): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 196.104597] audit: type=1006 audit(1786513410.738:818): pid=6695 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 200.260011] kauditd_printk_skb: 35 callbacks suppressed [ 200.260018] audit: type=1106 audit(1786513414.909:842): pid=6808 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 200.269643] audit: type=1104 audit(1786513414.909:843): pid=6808 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 200.277599] audit: type=1131 audit(1786513414.911:844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-8-172.31.22.106:22-20.103.240.199:49784 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.433211] audit: type=1130 audit(1786513420.083:845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4102-172.31.22.106:22-20.103.240.199:49786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.310886] audit: type=1101 audit(1786513420.961:846): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 206.318282] audit: type=1103 audit(1786513420.968:847): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 206.324772] audit: type=1006 audit(1786513420.968:848): pid=6855 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 206.328896] audit: type=1300 audit(1786513420.968:848): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffc52928c0 a2=3 a3=0 items=0 ppid=1 pid=6855 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.337194] audit: type=1327 audit(1786513420.968:848): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 206.357173] audit: type=1105 audit(1786513421.007:849): pid=6855 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 206.365532] audit: type=1103 audit(1786513421.015:850): pid=6859 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 206.950723] audit: type=1106 audit(1786513421.599:851): pid=6855 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 206.959917] audit: type=1104 audit(1786513421.600:852): pid=6855 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 211.773123] kauditd_printk_skb: 20 callbacks suppressed [ 211.773131] audit: type=1325 audit(1786513426.422:869): table=filter:151 family=2 entries=20 op=nft_register_rule pid=6918 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 211.784809] audit: type=1300 audit(1786513426.422:869): arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffc8b7f190 a2=0 a3=1 items=0 ppid=4168 pid=6918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.792512] audit: type=1327 audit(1786513426.422:869): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 211.800771] audit: type=1325 audit(1786513426.449:870): table=nat:152 family=2 entries=26 op=nft_register_rule pid=6918 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 211.805047] audit: type=1300 audit(1786513426.449:870): arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffc8b7f190 a2=0 a3=1 items=0 ppid=4168 pid=6918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 211.811977] audit: type=1327 audit(1786513426.449:870): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 211.828747] audit: type=1106 audit(1786513426.478:871): pid=6897 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 211.838740] audit: type=1104 audit(1786513426.478:872): pid=6897 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 211.847531] audit: type=1131 audit(1786513426.487:873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10-172.31.22.106:22-20.103.240.199:35598 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 212.018333] audit: type=1130 audit(1786513426.668:874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-4103-172.31.22.106:22-20.103.240.199:35600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 219.753256] kauditd_printk_skb: 27 callbacks suppressed [ 219.753262] audit: type=1325 audit(1786513434.403:894): table=filter:155 family=2 entries=20 op=nft_register_rule pid=6969 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 219.757670] audit: type=1300 audit(1786513434.403:894): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffffafe0f00 a2=0 a3=1 items=0 ppid=4168 pid=6969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 219.763986] audit: type=1327 audit(1786513434.403:894): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 219.773804] audit: type=1325 audit(1786513434.422:895): table=nat:156 family=2 entries=110 op=nft_register_chain pid=6969 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 219.777113] audit: type=1300 audit(1786513434.422:895): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=fffffafe0f00 a2=0 a3=1 items=0 ppid=4168 pid=6969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 219.783611] audit: type=1327 audit(1786513434.422:895): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 220.794228] audit: type=1130 audit(1786513435.443:896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-4104-172.31.22.106:22-20.103.240.199:60922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 221.688559] audit: type=1101 audit(1786513436.337:897): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 221.697154] audit: type=1103 audit(1786513436.347:898): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 221.704125] audit: type=1006 audit(1786513436.347:899): pid=6971 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 227.535516] kauditd_printk_skb: 7 callbacks suppressed [ 227.535522] audit: type=1130 audit(1786513442.185:905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-4105-172.31.22.106:22-20.103.240.199:38708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 228.432918] audit: type=1101 audit(1786513443.083:906): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 228.441393] audit: type=1103 audit(1786513443.091:907): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 228.447720] audit: type=1006 audit(1786513443.093:908): pid=7044 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 228.452829] audit: type=1300 audit(1786513443.093:908): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffe572c7b0 a2=3 a3=0 items=0 ppid=1 pid=7044 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 228.459745] audit: type=1327 audit(1786513443.093:908): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 228.480612] audit: type=1105 audit(1786513443.130:909): pid=7044 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 228.488326] audit: type=1103 audit(1786513443.138:910): pid=7048 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 229.050835] audit: type=1106 audit(1786513443.701:911): pid=7044 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 229.059072] audit: type=1104 audit(1786513443.701:912): pid=7044 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 234.220027] kauditd_printk_skb: 1 callbacks suppressed [ 234.220034] audit: type=1130 audit(1786513448.869:914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-12-172.31.22.106:22-20.103.240.199:38712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 235.094623] audit: type=1101 audit(1786513449.744:915): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 235.102609] audit: type=1103 audit(1786513449.752:916): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 235.108488] audit: type=1006 audit(1786513449.752:917): pid=7083 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 235.111750] audit: type=1300 audit(1786513449.752:917): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffca43e8d0 a2=3 a3=0 items=0 ppid=1 pid=7083 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 235.117816] audit: type=1327 audit(1786513449.752:917): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 235.138749] audit: type=1105 audit(1786513449.789:918): pid=7083 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 235.147098] audit: type=1103 audit(1786513449.797:919): pid=7087 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 235.711859] audit: type=1106 audit(1786513450.362:920): pid=7083 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 235.720351] audit: type=1104 audit(1786513450.362:921): pid=7083 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 240.895814] kauditd_printk_skb: 1 callbacks suppressed [ 240.895819] audit: type=1130 audit(1786513455.546:923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-13-172.31.22.106:22-20.103.240.199:56058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 241.807409] audit: type=1101 audit(1786513456.457:924): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 241.815860] audit: type=1103 audit(1786513456.466:925): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 241.821592] audit: type=1006 audit(1786513456.466:926): pid=7126 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 241.826192] audit: type=1300 audit(1786513456.466:926): arch=c00000b7 syscall=64 success=yes exit=3 a0=8 a1=ffffd5e45d90 a2=3 a3=0 items=0 ppid=1 pid=7126 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 241.832610] audit: type=1327 audit(1786513456.466:926): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 241.854198] audit: type=1105 audit(1786513456.504:927): pid=7126 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 241.862317] audit: type=1103 audit(1786513456.512:928): pid=7149 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 242.430372] audit: type=1106 audit(1786513457.080:929): pid=7126 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 242.439793] audit: type=1104 audit(1786513457.083:930): pid=7126 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.103.240.199 addr=20.103.240.199 terminal=ssh res=success' [ 256.365211] kauditd_printk_skb: 1 callbacks suppressed [ 256.365217] audit: type=1334 audit(1786513471.015:932): prog-id=131 op=UNLOAD [ 256.368908] audit: type=1334 audit(1786513471.015:933): prog-id=135 op=UNLOAD [ 257.311454] audit: type=1334 audit(1786513471.961:934): prog-id=287 op=LOAD [ 257.313594] audit: type=1334 audit(1786513471.963:935): prog-id=288 op=LOAD [ 257.315731] audit: type=1300 audit(1786513471.963:935): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=e9ed8abdf90 a2=98 a3=0 items=0 ppid=4121 pid=7266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 257.322789] audit: type=1327 audit(1786513471.963:935): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535616231343566633932376334303037333466343332303533663235 [ 257.329191] audit: type=1334 audit(1786513471.963:936): prog-id=288 op=UNLOAD [ 257.331572] audit: type=1300 audit(1786513471.963:936): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4121 pid=7266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 257.338152] audit: type=1327 audit(1786513471.963:936): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535616231343566633932376334303037333466343332303533663235 [ 257.344732] audit: type=1334 audit(1786513471.965:937): prog-id=289 op=LOAD [ 263.008358] kauditd_printk_skb: 38 callbacks suppressed [ 263.008364] audit: type=1334 audit(1786513477.658:952): prog-id=91 op=UNLOAD [ 263.011335] audit: type=1334 audit(1786513477.658:953): prog-id=95 op=UNLOAD [ 263.380811] audit: type=1334 audit(1786513478.031:954): prog-id=297 op=LOAD [ 263.383520] audit: type=1334 audit(1786513478.033:955): prog-id=298 op=LOAD [ 263.386083] audit: type=1300 audit(1786513478.033:955): arch=c00000b7 syscall=280 success=yes exit=20 a0=5 a1=69300c431f90 a2=98 a3=0 items=0 ppid=3712 pid=7384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 263.392233] audit: type=1327 audit(1786513478.033:955): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064326261633161633563353434313935623965383265656333363665 [ 263.398218] audit: type=1334 audit(1786513478.033:956): prog-id=298 op=UNLOAD [ 263.399904] audit: type=1300 audit(1786513478.033:956): arch=c00000b7 syscall=57 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3712 pid=7384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 263.406641] audit: type=1327 audit(1786513478.033:956): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064326261633161633563353434313935623965383265656333363665 [ 263.412386] audit: type=1334 audit(1786513478.035:957): prog-id=299 op=LOAD