: prog-id=119 op=UNLOAD [ 89.204631] audit: type=1300 audit(1789150430.453:392): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3494 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.212771] audit: type=1327 audit(1789150430.453:392): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561333564363131666335313634376139333464303938636431393130 [ 89.220777] audit: type=1334 audit(1789150430.453:393): prog-id=120 op=LOAD [ 89.222099] audit: type=1300 audit(1789150430.453:393): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1a7065f30290 a2=98 a3=0 items=0 ppid=3494 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 89.233772] audit: type=1327 audit(1789150430.453:393): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561333564363131666335313634376139333464303938636431393130 [ 99.106131] kauditd_printk_skb: 224 callbacks suppressed [ 99.106135] audit: type=1106 audit(1789150440.376:470): pid=2266 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 99.111596] audit: type=1104 audit(1789150440.377:471): pid=2266 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 99.266872] audit: type=1106 audit(1789150440.537:472): pid=2245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 99.274862] audit: type=1104 audit(1789150440.537:473): pid=2245 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 99.280349] audit: type=1131 audit(1789150440.540:474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-4099-172.31.31.20:22-20.101.212.173:38910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 104.913389] audit: type=1325 audit(1789150446.183:475): table=filter:98 family=2 entries=14 op=nft_register_rule pid=3832 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 104.921316] audit: type=1300 audit(1789150446.183:475): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffddc896880 a2=0 a3=7ffddc89686c items=0 ppid=3594 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.930542] audit: type=1327 audit(1789150446.183:475): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 104.935316] audit: type=1325 audit(1789150446.205:476): table=nat:99 family=2 entries=12 op=nft_register_rule pid=3832 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 104.938712] audit: type=1300 audit(1789150446.205:476): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffddc896880 a2=0 a3=0 items=0 ppid=3594 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 104.951518] audit: type=1327 audit(1789150446.205:476): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 106.015230] audit: type=1325 audit(1789150447.285:477): table=filter:100 family=2 entries=17 op=nft_register_rule pid=3834 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.019148] audit: type=1300 audit(1789150447.285:477): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe624c0fa0 a2=0 a3=7ffe624c0f8c items=0 ppid=3594 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.026036] audit: type=1327 audit(1789150447.285:477): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 106.029876] audit: type=1325 audit(1789150447.299:478): table=nat:101 family=2 entries=12 op=nft_register_rule pid=3834 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 111.639695] kauditd_printk_skb: 68 callbacks suppressed [ 111.639699] audit: type=1334 audit(1789150452.909:503): prog-id=149 op=LOAD [ 111.645650] audit: type=1334 audit(1789150452.914:504): prog-id=150 op=LOAD [ 111.648561] audit: type=1300 audit(1789150452.914:504): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1a61e98affd8 a2=98 a3=0 items=0 ppid=3878 pid=4082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.657495] audit: type=1327 audit(1789150452.914:504): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133306364346166353637303339396234313132303264336131393338 [ 111.665959] audit: type=1334 audit(1789150452.914:505): prog-id=150 op=UNLOAD [ 111.668385] audit: type=1300 audit(1789150452.914:505): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=3878 pid=4082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.676492] audit: type=1327 audit(1789150452.914:505): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133306364346166353637303339396234313132303264336131393338 [ 111.682654] audit: type=1334 audit(1789150452.914:506): prog-id=151 op=LOAD [ 111.684378] audit: type=1300 audit(1789150452.914:506): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=1a61e98b0290 a2=98 a3=0 items=0 ppid=3878 pid=4082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 111.690765] audit: type=1327 audit(1789150452.914:506): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133306364346166353637303339396234313132303264336131393338 [ 117.755338] kauditd_printk_skb: 12 callbacks suppressed [ 117.755342] audit: type=1334 audit(1789150459.025:511): prog-id=154 op=LOAD [ 117.757921] audit: type=1300 audit(1789150459.025:511): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=1cc7e56c4290 a2=98 a3=0 items=0 ppid=3930 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.763449] audit: type=1327 audit(1789150459.025:511): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663233393937373135386539343865343239376538333961326338 [ 117.769179] audit: type=1334 audit(1789150459.025:512): prog-id=155 op=LOAD [ 117.770599] audit: type=1300 audit(1789150459.025:512): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1cc7e56c3fe8 a2=98 a3=0 items=0 ppid=3930 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.776596] audit: type=1327 audit(1789150459.025:512): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663233393937373135386539343865343239376538333961326338 [ 117.783618] audit: type=1334 audit(1789150459.025:513): prog-id=155 op=UNLOAD [ 117.785452] audit: type=1300 audit(1789150459.025:513): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3930 pid=4126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 117.791206] audit: type=1327 audit(1789150459.025:513): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438663233393937373135386539343865343239376538333961326338 [ 117.796854] audit: type=1334 audit(1789150459.025:514): prog-id=154 op=UNLOAD [ 122.811002] kauditd_printk_skb: 21 callbacks suppressed [ 122.811006] audit: type=1334 audit(1789150464.081:522): prog-id=159 op=UNLOAD [ 124.002567] audit: type=1334 audit(1789150465.272:523): prog-id=160 op=LOAD [ 124.004506] audit: type=1300 audit(1789150465.272:523): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=1e3b2fc16290 a2=98 a3=0 items=0 ppid=3930 pid=4320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.013496] audit: type=1327 audit(1789150465.272:523): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532363838316266343634343331346665643135663830666461616531 [ 124.022141] audit: type=1334 audit(1789150465.272:524): prog-id=161 op=LOAD [ 124.024499] audit: type=1300 audit(1789150465.272:524): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1e3b2fc15fe8 a2=98 a3=0 items=0 ppid=3930 pid=4320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.032450] audit: type=1327 audit(1789150465.272:524): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532363838316266343634343331346665643135663830666461616531 [ 124.040298] audit: type=1334 audit(1789150465.272:525): prog-id=161 op=UNLOAD [ 124.042034] audit: type=1300 audit(1789150465.272:525): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3930 pid=4320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 124.048229] audit: type=1327 audit(1789150465.272:525): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532363838316266343634343331346665643135663830666461616531 [ 128.067712] kauditd_printk_skb: 28 callbacks suppressed [ 128.067716] audit: type=1334 audit(1789150469.337:536): prog-id=168 op=LOAD [ 128.070162] audit: type=1334 audit(1789150469.339:537): prog-id=169 op=LOAD [ 128.071520] audit: type=1300 audit(1789150469.339:537): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=106887931fd8 a2=98 a3=0 items=0 ppid=4599 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.076870] audit: type=1327 audit(1789150469.339:537): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353030623564336630386534623537633866666335663936636533 [ 128.083125] audit: type=1334 audit(1789150469.339:538): prog-id=169 op=UNLOAD [ 128.084802] audit: type=1300 audit(1789150469.339:538): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=4599 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.090436] audit: type=1327 audit(1789150469.339:538): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353030623564336630386534623537633866666335663936636533 [ 128.095916] audit: type=1334 audit(1789150469.339:539): prog-id=170 op=LOAD [ 128.097398] audit: type=1300 audit(1789150469.339:539): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=106887932290 a2=98 a3=0 items=0 ppid=4599 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 128.102887] audit: type=1327 audit(1789150469.339:539): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132353030623564336630386534623537633866666335663936636533 This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:29 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:29 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 ip-172-31-31-20 login: [ 133.129021] kauditd_printk_skb: 40 callbacks suppressed [ 133.129026] audit: type=1325 audit(1789150474.399:554): table=filter:106 family=2 entries=19 op=nft_register_rule pid=4842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.139488] audit: type=1300 audit(1789150474.399:554): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffdda6e44c0 a2=0 a3=7ffdda6e44ac items=0 ppid=3594 pid=4842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.152780] audit: type=1327 audit(1789150474.399:554): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 133.156026] audit: type=1325 audit(1789150474.416:555): table=nat:107 family=2 entries=21 op=nft_register_chain pid=4842 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 133.159360] audit: type=1300 audit(1789150474.416:555): arch=c000003e syscall=46 success=yes exit=7044 a0=3 a1=7ffdda6e44c0 a2=0 a3=7ffdda6e44ac items=0 ppid=3594 pid=4842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 133.165820] audit: type=1327 audit(1789150474.416:555): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 134.157084] audit: type=1334 audit(1789150475.427:556): prog-id=178 op=LOAD [ 134.158978] audit: type=1300 audit(1789150475.427:556): arch=c000003e syscall=321 success=yes exit=13 a0=5 a1=7f7041abba10 a2=94 a3=58b190c items=0 ppid=4520 pid=4877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 134.173687] audit: type=1327 audit(1789150475.427:556): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 134.178747] audit: type=1334 audit(1789150475.427:557): prog-id=178 op=UNLOAD This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:37 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:37 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 ip-172-31-31-20 login: This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:39 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:39 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 ip-172-31-31-20 login: This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:40 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:40 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 ip-172-31-31-20 login: [ 139.207116] kauditd_printk_skb: 351 callbacks suppressed [ 139.207120] audit: type=1325 audit(1789150480.428:677): table=filter:121 family=2 entries=58 op=nft_register_chain pid=5457 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 139.215314] audit: type=1300 audit(1789150480.428:677): arch=c000003e syscall=46 success=yes exit=27336 a0=3 a1=7fffe526d890 a2=0 a3=7fffe526d87c items=0 ppid=4877 pid=5457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.229954] audit: type=1327 audit(1789150480.428:677): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 139.248288] audit: type=1334 audit(1789150480.518:678): prog-id=236 op=LOAD [ 139.250746] audit: type=1334 audit(1789150480.519:679): prog-id=237 op=LOAD [ 139.253100] audit: type=1300 audit(1789150480.519:679): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=3ae0fc729fd8 a2=98 a3=0 items=0 ppid=5444 pid=5459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.261753] audit: type=1327 audit(1789150480.519:679): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031303462316136323661623139363930386265623039646333323764 [ 139.273015] audit: type=1334 audit(1789150480.519:680): prog-id=237 op=UNLOAD [ 139.275667] audit: type=1300 audit(1789150480.519:680): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5444 pid=5459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 139.285011] audit: type=1327 audit(1789150480.519:680): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031303462316136323661623139363930386265623039646333323764 This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:41 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:41 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 ip-172-31-31-20 login: This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:42 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:42 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 ip-172-31-31-20 login: This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:43 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 This is ip-172-31-31-20 (Linux x86_64 6.12.109-flatcar) 18:14:43 SSH host key: SHA256:hr3RiogEws3E62dXDFXKj3NDwoT8sBV2zief869yxs8 (ECDSA) SSH host key: SHA256:lSXJZVCJhv9W9fZljrVkffANepu8QEdb8MGx3nR+j0o (RSA) SSH host key: SHA256:zZEJ68qM371/s392CEO0ht7vgq4y51fhaCP4pn/w6qU (ED25519) SSH host key: SHA256:4bnBqcIz/MgCCtxRy1ImrhCxx80JowQLg57rTNqNEF8 (MLDSA44-ED25519) eth0: 172.31.31.20 fe80::4ff:eeff:feaf:ff3 ip-172-31-31-20 login: [ 145.286907] kauditd_printk_skb: 152 callbacks suppressed [ 145.286910] audit: type=1334 audit(1789150486.557:735): prog-id=266 op=LOAD [ 145.289687] audit: type=1300 audit(1789150486.557:735): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=155f65eaa290 a2=98 a3=0 items=0 ppid=5165 pid=5802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.294876] audit: type=1327 audit(1789150486.557:735): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383930303566346261613562393437386563646636663965366463 [ 145.300410] audit: type=1334 audit(1789150486.559:736): prog-id=267 op=LOAD [ 145.302505] audit: type=1300 audit(1789150486.559:736): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=155f65ea9fe8 a2=98 a3=0 items=0 ppid=5165 pid=5802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.308151] audit: type=1327 audit(1789150486.559:736): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383930303566346261613562393437386563646636663965366463 [ 145.313921] audit: type=1334 audit(1789150486.559:737): prog-id=267 op=UNLOAD [ 145.315710] audit: type=1300 audit(1789150486.559:737): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5165 pid=5802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 145.321171] audit: type=1327 audit(1789150486.559:737): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132383930303566346261613562393437386563646636663965366463 [ 145.327058] audit: type=1334 audit(1789150486.559:738): prog-id=266 op=UNLOAD [ 151.029480] kauditd_printk_skb: 61 callbacks suppressed [ 151.029484] audit: type=1325 audit(1789150492.299:760): table=filter:135 family=2 entries=12 op=nft_register_rule pid=5959 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 151.033680] audit: type=1300 audit(1789150492.299:760): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd28e38b40 a2=0 a3=7ffd28e38b2c items=0 ppid=3594 pid=5959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.039802] audit: type=1327 audit(1789150492.299:760): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 151.099645] audit: type=1325 audit(1789150492.369:761): table=nat:136 family=2 entries=58 op=nft_register_chain pid=5959 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 151.103207] audit: type=1300 audit(1789150492.369:761): arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffd28e38b40 a2=0 a3=7ffd28e38b2c items=0 ppid=3594 pid=5959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 151.113459] audit: type=1327 audit(1789150492.369:761): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 152.189528] audit: type=1325 audit(1789150493.459:762): table=filter:137 family=2 entries=11 op=nft_register_rule pid=5967 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 152.194230] audit: type=1300 audit(1789150493.459:762): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffdba83dad0 a2=0 a3=7ffdba83dabc items=0 ppid=3594 pid=5967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 152.209749] audit: type=1327 audit(1789150493.459:762): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 152.221409] audit: type=1325 audit(1789150493.474:763): table=nat:138 family=2 entries=29 op=nft_register_chain pid=5967 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 156.434395] kauditd_printk_skb: 30 callbacks suppressed [ 156.434398] audit: type=1334 audit(1789150497.704:774): prog-id=284 op=LOAD [ 156.436918] audit: type=1300 audit(1789150497.704:774): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=2d874c7f0290 a2=98 a3=0 items=0 ppid=5165 pid=6068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.443212] audit: type=1327 audit(1789150497.704:774): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366646364346264613030666539396164646461663361333664393537 [ 156.449257] audit: type=1334 audit(1789150497.705:775): prog-id=285 op=LOAD [ 156.450793] audit: type=1300 audit(1789150497.705:775): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=2d874c7effe8 a2=98 a3=0 items=0 ppid=5165 pid=6068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.456581] audit: type=1327 audit(1789150497.705:775): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366646364346264613030666539396164646461663361333664393537 [ 156.463798] audit: type=1334 audit(1789150497.705:776): prog-id=285 op=UNLOAD [ 156.465477] audit: type=1300 audit(1789150497.705:776): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=5165 pid=6068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 156.471859] audit: type=1327 audit(1789150497.705:776): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366646364346264613030666539396164646461663361333664393537 [ 156.478067] audit: type=1334 audit(1789150497.705:777): prog-id=284 op=UNLOAD [ 165.527592] kauditd_printk_skb: 16 callbacks suppressed [ 165.527595] audit: type=1130 audit(1789150506.797:788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-5-172.31.31.20:22-20.101.212.173:53318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 166.453010] audit: type=1101 audit(1789150507.723:789): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 166.459105] audit: type=1103 audit(1789150507.725:790): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 166.464106] audit: type=1006 audit(1789150507.725:791): pid=6158 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 [ 166.467291] audit: type=1300 audit(1789150507.725:791): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffee104de70 a2=3 a3=0 items=0 ppid=1 pid=6158 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 166.473186] audit: type=1327 audit(1789150507.725:791): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 166.481018] audit: type=1105 audit(1789150507.751:792): pid=6158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 166.488140] audit: type=1103 audit(1789150507.754:793): pid=6162 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 167.430688] audit: type=1106 audit(1789150508.700:794): pid=6158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 167.437982] audit: type=1104 audit(1789150508.702:795): pid=6158 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 172.624680] kauditd_printk_skb: 13 callbacks suppressed [ 172.624684] audit: type=1130 audit(1789150513.894:801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-4101-172.31.31.20:22-20.101.212.173:35688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 173.677422] audit: type=1101 audit(1789150514.946:802): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 173.690250] audit: type=1103 audit(1789150514.958:803): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 173.703265] audit: type=1006 audit(1789150514.958:804): pid=6197 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 [ 173.709577] audit: type=1300 audit(1789150514.958:804): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc6b252450 a2=3 a3=0 items=0 ppid=1 pid=6197 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 173.720116] audit: type=1327 audit(1789150514.958:804): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 173.726738] audit: type=1105 audit(1789150514.996:805): pid=6197 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 173.733792] audit: type=1103 audit(1789150515.000:806): pid=6222 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 174.673295] audit: type=1106 audit(1789150515.943:807): pid=6197 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 174.680943] audit: type=1104 audit(1789150515.943:808): pid=6197 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 179.838525] kauditd_printk_skb: 1 callbacks suppressed [ 179.838529] audit: type=1130 audit(1789150521.108:810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-6-172.31.31.20:22-20.101.212.173:41510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.704300] audit: type=1101 audit(1789150521.974:811): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 180.710280] audit: type=1103 audit(1789150521.976:812): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 180.715905] audit: type=1006 audit(1789150521.976:813): pid=6270 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 180.718956] audit: type=1300 audit(1789150521.976:813): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe05a86fa0 a2=3 a3=0 items=0 ppid=1 pid=6270 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.724838] audit: type=1327 audit(1789150521.976:813): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 180.732171] audit: type=1105 audit(1789150522.002:814): pid=6270 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 180.740824] audit: type=1103 audit(1789150522.007:815): pid=6276 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 181.359505] audit: type=1106 audit(1789150522.628:816): pid=6270 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 181.366466] audit: type=1104 audit(1789150522.629:817): pid=6270 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 186.442093] kauditd_printk_skb: 1 callbacks suppressed [ 186.442096] audit: type=1325 audit(1789150527.712:819): table=filter:145 family=2 entries=9 op=nft_register_rule pid=6328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 186.446159] audit: type=1300 audit(1789150527.712:819): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffde35fe140 a2=0 a3=7ffde35fe12c items=0 ppid=3594 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 186.451982] audit: type=1327 audit(1789150527.712:819): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 186.454929] audit: type=1325 audit(1789150527.724:820): table=nat:146 family=2 entries=31 op=nft_register_chain pid=6328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 186.457778] audit: type=1300 audit(1789150527.724:820): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffde35fe140 a2=0 a3=7ffde35fe12c items=0 ppid=3594 pid=6328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 186.463442] audit: type=1327 audit(1789150527.724:820): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 186.531089] audit: type=1130 audit(1789150527.801:821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-7-172.31.31.20:22-20.101.212.173:41524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 187.477190] audit: type=1101 audit(1789150528.747:822): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 187.487702] audit: type=1103 audit(1789150528.749:823): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 187.494897] audit: type=1006 audit(1789150528.749:824): pid=6330 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 191.783808] kauditd_printk_skb: 25 callbacks suppressed [ 191.783812] audit: type=1101 audit(1789150533.054:842): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 191.791019] audit: type=1103 audit(1789150533.057:843): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 191.796778] audit: type=1006 audit(1789150533.057:844): pid=6400 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 [ 191.799816] audit: type=1300 audit(1789150533.057:844): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffce6b3fab0 a2=3 a3=0 items=0 ppid=1 pid=6400 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 191.808007] audit: type=1327 audit(1789150533.057:844): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 191.830552] audit: type=1105 audit(1789150533.100:845): pid=6400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 191.837028] audit: type=1103 audit(1789150533.102:846): pid=6404 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 192.727791] audit: type=1106 audit(1789150533.996:847): pid=6400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 192.735514] audit: type=1104 audit(1789150533.996:848): pid=6400 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 192.742183] audit: type=1131 audit(1789150533.998:849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-4102-172.31.31.20:22-20.101.212.173:54224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 197.896351] audit: type=1130 audit(1789150539.166:850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-9-172.31.31.20:22-20.101.212.173:46676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 198.833458] audit: type=1101 audit(1789150540.103:851): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 198.840390] audit: type=1103 audit(1789150540.110:852): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 198.846901] audit: type=1006 audit(1789150540.110:853): pid=6424 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 [ 198.850637] audit: type=1300 audit(1789150540.110:853): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe964d12c0 a2=3 a3=0 items=0 ppid=1 pid=6424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 198.856816] audit: type=1327 audit(1789150540.110:853): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 198.862865] audit: type=1105 audit(1789150540.133:854): pid=6424 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 198.869584] audit: type=1103 audit(1789150540.136:855): pid=6441 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 200.168705] audit: type=1106 audit(1789150541.438:856): pid=6424 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 200.176363] audit: type=1104 audit(1789150541.439:857): pid=6424 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 203.479007] kauditd_printk_skb: 13 callbacks suppressed [ 203.479010] audit: type=1101 audit(1789150544.749:869): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 203.486099] audit: type=1103 audit(1789150544.755:870): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 203.491757] audit: type=1006 audit(1789150544.755:871): pid=6469 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 [ 203.495159] audit: type=1300 audit(1789150544.755:871): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffcc6931890 a2=3 a3=0 items=0 ppid=1 pid=6469 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 203.502273] audit: type=1327 audit(1789150544.755:871): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 203.516849] audit: type=1105 audit(1789150544.787:872): pid=6469 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 203.523566] audit: type=1103 audit(1789150544.790:873): pid=6495 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 204.933732] audit: type=1106 audit(1789150546.203:874): pid=6469 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 204.944300] audit: type=1104 audit(1789150546.203:875): pid=6469 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 204.952878] audit: type=1131 audit(1789150546.206:876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10-172.31.31.20:22-20.101.212.173:46696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 209.108014] kauditd_printk_skb: 24 callbacks suppressed [ 209.108017] audit: type=1101 audit(1789150550.378:891): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 209.115484] audit: type=1103 audit(1789150550.379:892): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 209.121405] audit: type=1006 audit(1789150550.379:893): pid=6591 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 [ 209.125339] audit: type=1300 audit(1789150550.379:893): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe97193690 a2=3 a3=0 items=0 ppid=1 pid=6591 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 209.131312] audit: type=1327 audit(1789150550.379:893): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 209.139922] audit: type=1105 audit(1789150550.410:894): pid=6591 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 209.146733] audit: type=1103 audit(1789150550.413:895): pid=6602 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 210.160997] audit: type=1106 audit(1789150551.430:896): pid=6591 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 210.168816] audit: type=1104 audit(1789150551.438:897): pid=6591 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 210.174336] audit: type=1131 audit(1789150551.441:898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-11-172.31.31.20:22-20.101.212.173:59568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 215.312543] kauditd_printk_skb: 6 callbacks suppressed [ 215.312548] audit: type=1130 audit(1789150556.582:901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-12-172.31.31.20:22-20.101.212.173:59572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 216.295013] audit: type=1101 audit(1789150557.565:902): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 216.301011] audit: type=1103 audit(1789150557.567:903): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 216.307064] audit: type=1006 audit(1789150557.567:904): pid=6619 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 216.310191] audit: type=1300 audit(1789150557.567:904): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe4b620550 a2=3 a3=0 items=0 ppid=1 pid=6619 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 216.316283] audit: type=1327 audit(1789150557.567:904): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 216.330681] audit: type=1105 audit(1789150557.600:905): pid=6619 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 216.341615] audit: type=1103 audit(1789150557.611:906): pid=6657 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 217.478207] audit: type=1106 audit(1789150558.748:907): pid=6619 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 217.486153] audit: type=1104 audit(1789150558.748:908): pid=6619 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 222.649219] kauditd_printk_skb: 1 callbacks suppressed [ 222.649222] audit: type=1130 audit(1789150563.919:910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-13-172.31.31.20:22-20.101.212.173:59204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 223.565582] audit: type=1101 audit(1789150564.835:911): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 223.571335] audit: type=1103 audit(1789150564.837:912): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 223.577614] audit: type=1006 audit(1789150564.837:913): pid=6696 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 223.580990] audit: type=1300 audit(1789150564.837:913): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff0bbf7470 a2=3 a3=0 items=0 ppid=1 pid=6696 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 223.586406] audit: type=1327 audit(1789150564.837:913): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 223.601237] audit: type=1105 audit(1789150564.871:914): pid=6696 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 223.608033] audit: type=1103 audit(1789150564.875:915): pid=6700 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 224.617662] audit: type=1106 audit(1789150565.887:916): pid=6696 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 224.625912] audit: type=1104 audit(1789150565.887:917): pid=6696 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 229.777049] kauditd_printk_skb: 1 callbacks suppressed [ 229.777052] audit: type=1130 audit(1789150571.047:919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-4105-172.31.31.20:22-20.101.212.173:54908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 230.681855] audit: type=1101 audit(1789150571.952:920): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 230.689844] audit: type=1103 audit(1789150571.952:921): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 230.695215] audit: type=1006 audit(1789150571.952:922): pid=6742 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 230.698314] audit: type=1300 audit(1789150571.952:922): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc7f16ca10 a2=3 a3=0 items=0 ppid=1 pid=6742 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 230.704365] audit: type=1327 audit(1789150571.952:922): proctitle=737368642D73657373696F6E3A20636F7265205B707269765D [ 230.713013] audit: type=1105 audit(1789150571.983:923): pid=6742 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 230.719713] audit: type=1103 audit(1789150571.986:924): pid=6746 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 231.482917] audit: type=1106 audit(1789150572.752:925): pid=6742 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success' [ 231.490295] audit: type=1104 audit(1789150572.760:926): pid=6742 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.101.212.173 addr=20.101.212.173 terminal=ssh res=success'