572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138316636346162623236616431303634333039633062373839343034 [ 87.375319] audit: type=1334 audit(1788851559.082:458): prog-id=133 op=LOAD [ 87.376684] audit: type=1300 audit(1788851559.082:458): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=13c06c10e290 a2=98 a3=0 items=0 ppid=3462 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 87.382367] audit: type=1327 audit(1788851559.082:458): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138316636346162623236616431303634333039633062373839343034 [ 95.024793] kauditd_printk_skb: 12 callbacks suppressed [ 95.024798] audit: type=1106 audit(1788851566.757:463): pid=2093 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_umask,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 95.030158] audit: type=1104 audit(1788851566.758:464): pid=2093 uid=500 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' [ 95.182125] audit: type=1106 audit(1788851566.916:465): pid=2088 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 95.189267] audit: type=1104 audit(1788851566.916:466): pid=2088 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 95.194494] audit: type=1131 audit(1788851566.918:467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-7-172.31.28.172:22-20.61.25.254:47494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 99.131756] audit: type=1325 audit(1788851570.865:468): table=filter:98 family=2 entries=15 op=nft_register_rule pid=3751 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 99.137372] audit: type=1300 audit(1788851570.865:468): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffff14b69e0 a2=0 a3=7ffff14b69cc items=0 ppid=3510 pid=3751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 99.145728] audit: type=1327 audit(1788851570.865:468): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 99.149725] audit: type=1325 audit(1788851570.873:469): table=nat:99 family=2 entries=12 op=nft_register_rule pid=3751 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 99.175789] audit: type=1300 audit(1788851570.873:469): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffff14b69e0 a2=0 a3=0 items=0 ppid=3510 pid=3751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.213929] kauditd_printk_skb: 1 callbacks suppressed [ 100.213933] audit: type=1325 audit(1788851571.947:470): table=filter:100 family=2 entries=18 op=nft_register_rule pid=3754 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 100.224430] audit: type=1300 audit(1788851571.947:470): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcac9c61a0 a2=0 a3=7ffcac9c618c items=0 ppid=3510 pid=3754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.234533] audit: type=1327 audit(1788851571.947:470): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 100.238810] audit: type=1325 audit(1788851571.955:471): table=nat:101 family=2 entries=12 op=nft_register_rule pid=3754 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 100.242902] audit: type=1300 audit(1788851571.955:471): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcac9c61a0 a2=0 a3=0 items=0 ppid=3510 pid=3754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 100.250842] audit: type=1327 audit(1788851571.955:471): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 101.281240] audit: type=1325 audit(1788851573.015:472): table=filter:102 family=2 entries=21 op=nft_register_rule pid=3837 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 101.291739] audit: type=1300 audit(1788851573.015:472): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffee3435dd0 a2=0 a3=7ffee3435dbc items=0 ppid=3510 pid=3837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 101.308190] audit: type=1327 audit(1788851573.015:472): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 101.314998] audit: type=1325 audit(1788851573.024:473): table=nat:103 family=2 entries=12 op=nft_register_rule pid=3837 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 106.540127] kauditd_printk_skb: 68 callbacks suppressed [ 106.540131] audit: type=1334 audit(1788851578.274:498): prog-id=151 op=LOAD [ 106.545028] audit: type=1300 audit(1788851578.274:498): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=1835cfab2290 a2=98 a3=0 items=0 ppid=3847 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.557748] audit: type=1327 audit(1788851578.274:498): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564363263333933393134303166313064653131663865353265616635 [ 106.568257] audit: type=1334 audit(1788851578.274:499): prog-id=152 op=LOAD [ 106.569879] audit: type=1300 audit(1788851578.274:499): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1835cfab1fe8 a2=98 a3=0 items=0 ppid=3847 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.576197] audit: type=1327 audit(1788851578.274:499): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564363263333933393134303166313064653131663865353265616635 [ 106.582251] audit: type=1334 audit(1788851578.274:500): prog-id=152 op=UNLOAD [ 106.583905] audit: type=1300 audit(1788851578.274:500): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3847 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 106.589826] audit: type=1327 audit(1788851578.274:500): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564363263333933393134303166313064653131663865353265616635 [ 106.599152] audit: type=1334 audit(1788851578.274:501): prog-id=151 op=UNLOAD [ 113.376637] kauditd_printk_skb: 6 callbacks suppressed [ 113.376641] audit: type=1334 audit(1788851585.110:504): prog-id=154 op=LOAD [ 113.379169] audit: type=1300 audit(1788851585.110:504): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=1d4ab7bb2290 a2=98 a3=0 items=0 ppid=3847 pid=4083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.384670] audit: type=1327 audit(1788851585.110:504): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361326631623261663131383466396336663837303530656338363533 [ 113.390403] audit: type=1334 audit(1788851585.111:505): prog-id=155 op=LOAD [ 113.391831] audit: type=1300 audit(1788851585.111:505): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1d4ab7bb1fe8 a2=98 a3=0 items=0 ppid=3847 pid=4083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.398295] audit: type=1327 audit(1788851585.111:505): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361326631623261663131383466396336663837303530656338363533 [ 113.404106] audit: type=1334 audit(1788851585.111:506): prog-id=155 op=UNLOAD [ 113.405587] audit: type=1300 audit(1788851585.111:506): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3847 pid=4083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 113.411685] audit: type=1327 audit(1788851585.111:506): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361326631623261663131383466396336663837303530656338363533 [ 113.422267] audit: type=1334 audit(1788851585.111:507): prog-id=154 op=UNLOAD [ 118.910557] kauditd_printk_skb: 6 callbacks suppressed [ 118.910560] audit: type=1334 audit(1788851590.644:510): prog-id=157 op=LOAD [ 118.913151] audit: type=1300 audit(1788851590.644:510): arch=c000003e syscall=321 success=yes exit=19 a0=5 a1=1228052c2290 a2=98 a3=0 items=0 ppid=3847 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.918644] audit: type=1327 audit(1788851590.644:510): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661343330316533313766623566646338613035343862663263653964 [ 118.924275] audit: type=1334 audit(1788851590.644:511): prog-id=158 op=LOAD [ 118.926110] audit: type=1300 audit(1788851590.644:511): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=1228052c1fe8 a2=98 a3=0 items=0 ppid=3847 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.931849] audit: type=1327 audit(1788851590.644:511): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661343330316533313766623566646338613035343862663263653964 [ 118.938033] audit: type=1334 audit(1788851590.644:512): prog-id=158 op=UNLOAD [ 118.939589] audit: type=1300 audit(1788851590.644:512): arch=c000003e syscall=3 success=yes exit=0 a0=15 a1=0 a2=0 a3=0 items=0 ppid=3847 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 118.946661] audit: type=1327 audit(1788851590.644:512): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661343330316533313766623566646338613035343862663263653964 [ 118.952589] audit: type=1334 audit(1788851590.644:513): prog-id=157 op=UNLOAD [ 125.839432] kauditd_printk_skb: 21 callbacks suppressed [ 125.839436] audit: type=1325 audit(1788851597.573:521): table=filter:104 family=2 entries=21 op=nft_register_rule pid=4454 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 125.846879] audit: type=1300 audit(1788851597.573:521): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd578657c0 a2=0 a3=7ffd578657ac items=0 ppid=3510 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.860828] audit: type=1327 audit(1788851597.573:521): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 125.864488] audit: type=1325 audit(1788851597.589:522): table=nat:105 family=2 entries=19 op=nft_register_chain pid=4454 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 125.867764] audit: type=1300 audit(1788851597.589:522): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd578657c0 a2=0 a3=7ffd578657ac items=0 ppid=3510 pid=4454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 125.874415] audit: type=1327 audit(1788851597.589:522): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 127.792472] audit: type=1334 audit(1788851599.526:523): prog-id=163 op=LOAD [ 127.794337] audit: type=1300 audit(1788851599.526:523): arch=c000003e syscall=321 success=yes exit=13 a0=5 a1=7f0446ffca10 a2=94 a3=58b190c items=0 ppid=4483 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="calico-node" exe="/usr/bin/calico-node" subj=system_u:system_r:kernel_t:s0 key=(null) [ 127.807727] audit: type=1327 audit(1788851599.526:523): proctitle=63616C69636F2D6E6F6465002D66656C6978 [ 127.813480] audit: type=1334 audit(1788851599.526:524): prog-id=163 op=UNLOAD This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:22 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: [ 130.865016] kauditd_printk_skb: 239 callbacks suppressed [ 130.865020] audit: type=1325 audit(1788851602.599:604): table=calico-arp:111 family=3 entries=3 op=nft_register_chain pid=4722 subj=system_u:system_r:kernel_t:s0 comm="nft" [ 130.869094] audit: type=1300 audit(1788851602.599:604): arch=c000003e syscall=46 success=yes exit=732 a0=3 a1=7ffd2c3b03f0 a2=0 a3=7f21817f8c88 items=0 ppid=4494 pid=4722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nft" exe="/usr/sbin/nft" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.875877] audit: type=1327 audit(1788851602.599:604): proctitle=2F7573722F7362696E2F6E6674002D66002D [ 130.890324] audit: type=1325 audit(1788851602.610:605): table=filter:112 family=2 entries=38 op=nft_register_chain pid=4720 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 130.893632] audit: type=1300 audit(1788851602.610:605): arch=c000003e syscall=46 success=yes exit=21396 a0=3 a1=7ffd419a4570 a2=0 a3=7ffd419a455c items=0 ppid=4494 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 130.899752] audit: type=1327 audit(1788851602.610:605): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 131.272267] audit: type=1334 audit(1788851603.006:606): prog-id=201 op=LOAD [ 131.274263] audit: type=1334 audit(1788851603.008:607): prog-id=202 op=LOAD [ 131.276214] audit: type=1300 audit(1788851603.008:607): arch=c000003e syscall=321 success=yes exit=21 a0=5 a1=32b9ab0dfd8 a2=98 a3=0 items=0 ppid=4749 pid=4760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 131.282013] audit: type=1327 audit(1788851603.008:607): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361626333303464666531333833313231333439656632366336323738 This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:23 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:24 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:25 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: [ 136.258442] kauditd_printk_skb: 68 callbacks suppressed [ 136.258448] audit: type=1325 audit(1788851607.990:632): table=filter:115 family=2 entries=42 op=nft_register_chain pid=4938 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 136.264893] audit: type=1300 audit(1788851607.990:632): arch=c000003e syscall=46 success=yes exit=22584 a0=3 a1=7ffc0bbd90a0 a2=0 a3=7ffc0bbd908c items=0 ppid=4494 pid=4938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.272456] audit: type=1327 audit(1788851607.990:632): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 136.282217] audit: type=1325 audit(1788851608.016:633): table=calico-arp:116 family=3 entries=3 op=nft_register_chain pid=4945 subj=system_u:system_r:kernel_t:s0 comm="nft" [ 136.288964] audit: type=1300 audit(1788851608.016:633): arch=c000003e syscall=46 success=yes exit=732 a0=3 a1=7ffdef1f26c0 a2=0 a3=7f12205e2c88 items=0 ppid=4494 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nft" exe="/usr/sbin/nft" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.300052] audit: type=1327 audit(1788851608.016:633): proctitle=2F7573722F7362696E2F6E6674002D66002D [ 136.323947] audit: type=1334 audit(1788851608.058:634): prog-id=216 op=LOAD [ 136.326308] audit: type=1334 audit(1788851608.059:635): prog-id=217 op=LOAD [ 136.328321] audit: type=1300 audit(1788851608.059:635): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=35545b731fd8 a2=98 a3=0 items=0 ppid=4924 pid=4937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 136.336716] audit: type=1327 audit(1788851608.059:635): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665323864666132653234623763376236313430663466373735306637 This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:28 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:29 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:30 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:31 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:32 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: [ 141.649175] kauditd_printk_skb: 242 callbacks suppressed [ 141.649180] audit: type=1325 audit(1788851613.383:722): table=filter:133 family=2 entries=15 op=nft_register_rule pid=5602 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 141.653170] audit: type=1300 audit(1788851613.383:722): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe0134c960 a2=0 a3=7ffe0134c94c items=0 ppid=3510 pid=5602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.658800] audit: type=1327 audit(1788851613.383:722): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 141.662005] audit: type=1325 audit(1788851613.390:723): table=nat:134 family=2 entries=37 op=nft_register_chain pid=5602 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 141.666774] audit: type=1300 audit(1788851613.390:723): arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffe0134c960 a2=0 a3=7ffe0134c94c items=0 ppid=3510 pid=5602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 141.673075] audit: type=1327 audit(1788851613.390:723): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:33 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: This is ip-172-31-28-172 (Linux x86_64 6.12.108-flatcar) 07:13:34 SSH host key: SHA256:kef2ga4oIxX5UOEmpO32b15WN/x7qJ2jHw2bjpjRFwI (MLDSA44-ED25519) SSH host key: SHA256:AnvS+xwLOwQDegIGPcur1AZ/GYw7ikVmyTbEntFxKFI (ED25519) SSH host key: SHA256:6na73l0KK6ILY1pIsi4+CyJxC2lbTCGHxKyWM0RkQAY (RSA) SSH host key: SHA256:oTTmBDtXkA/0BK2mSMLNa5YZBBT9lyu3OReX98zjmUA (ECDSA) eth0: 172.31.28.172 fe80::4ec:a8ff:fe85:704d%eth0 ip-172-31-28-172 login: [ 143.323916] audit: type=1334 audit(1788851615.058:724): prog-id=261 op=LOAD [ 143.327052] audit: type=1334 audit(1788851615.058:725): prog-id=262 op=LOAD [ 143.328617] audit: type=1300 audit(1788851615.058:725): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2c1a4c729fd8 a2=98 a3=0 items=0 ppid=5065 pid=5615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 143.335064] audit: type=1327 audit(1788851615.058:725): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373335636565353736356438326339356163663563366533663166 [ 148.295564] kauditd_printk_skb: 18 callbacks suppressed [ 148.295569] audit: type=1325 audit(1788851620.029:732): table=filter:135 family=2 entries=12 op=nft_register_rule pid=5687 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 148.300485] audit: type=1300 audit(1788851620.029:732): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdffeda600 a2=0 a3=7ffdffeda5ec items=0 ppid=3510 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.307486] audit: type=1327 audit(1788851620.029:732): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 148.353183] audit: type=1325 audit(1788851620.082:733): table=nat:136 family=2 entries=58 op=nft_register_chain pid=5687 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 148.359708] audit: type=1300 audit(1788851620.082:733): arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffdffeda600 a2=0 a3=7ffdffeda5ec items=0 ppid=3510 pid=5687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 148.371719] audit: type=1327 audit(1788851620.082:733): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 150.216158] audit: type=1334 audit(1788851621.950:734): prog-id=266 op=LOAD [ 150.218593] audit: type=1334 audit(1788851621.952:735): prog-id=267 op=LOAD [ 150.220680] audit: type=1300 audit(1788851621.952:735): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=2c5883615fd8 a2=98 a3=0 items=0 ppid=5120 pid=5706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 150.227315] audit: type=1327 audit(1788851621.952:735): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433633531626630393064636632666431613339613433376536393839 [ 153.524100] kauditd_printk_skb: 73 callbacks suppressed [ 153.524106] audit: type=1325 audit(1788851625.258:761): table=filter:143 family=2 entries=10 op=nft_register_rule pid=5823 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 153.528987] audit: type=1300 audit(1788851625.258:761): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff9c1ecb70 a2=0 a3=7fff9c1ecb5c items=0 ppid=3510 pid=5823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.535404] audit: type=1327 audit(1788851625.258:761): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 153.544271] audit: type=1325 audit(1788851625.278:762): table=nat:144 family=2 entries=36 op=nft_register_chain pid=5823 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 153.548177] audit: type=1300 audit(1788851625.278:762): arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fff9c1ecb70 a2=0 a3=7fff9c1ecb5c items=0 ppid=3510 pid=5823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 153.555436] audit: type=1327 audit(1788851625.278:762): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 154.140705] audit: type=1325 audit(1788851625.862:763): table=filter:145 family=2 entries=109 op=nft_register_chain pid=5829 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 154.144541] audit: type=1300 audit(1788851625.862:763): arch=c000003e syscall=46 success=yes exit=48476 a0=3 a1=7ffe6ac1aa40 a2=0 a3=7ffe6ac1aa2c items=0 ppid=4494 pid=5829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 154.152040] audit: type=1327 audit(1788851625.862:763): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 154.434709] audit: type=1325 audit(1788851626.166:764): table=filter:146 family=2 entries=124 op=nft_register_chain pid=5843 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 158.569813] kauditd_printk_skb: 19 callbacks suppressed [ 158.569817] audit: type=1325 audit(1788851630.303:776): table=filter:149 family=2 entries=72 op=nft_register_chain pid=5930 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" [ 158.574846] audit: type=1300 audit(1788851630.303:776): arch=c000003e syscall=46 success=yes exit=29636 a0=3 a1=7ffc445cdf50 a2=0 a3=7ffc445cdf3c items=0 ppid=4494 pid=5930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 158.581475] audit: type=1327 audit(1788851630.303:776): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 [ 161.186908] audit: type=1334 audit(1788851632.920:777): prog-id=279 op=LOAD [ 161.188675] audit: type=1334 audit(1788851632.921:778): prog-id=280 op=LOAD [ 161.190407] audit: type=1300 audit(1788851632.921:778): arch=c000003e syscall=321 success=yes exit=20 a0=5 a1=a4b799b1fd8 a2=98 a3=0 items=0 ppid=5420 pid=5963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.196792] audit: type=1327 audit(1788851632.921:778): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139366431303230303338366530313165613837636634356436613166 [ 161.202662] audit: type=1334 audit(1788851632.921:779): prog-id=280 op=UNLOAD [ 161.204169] audit: type=1300 audit(1788851632.921:779): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=0 a2=0 a3=0 items=0 ppid=5420 pid=5963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/usr/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) [ 161.211167] audit: type=1327 audit(1788851632.921:779): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139366431303230303338366530313165613837636634356436613166 [ 163.597157] kauditd_printk_skb: 36 callbacks suppressed [ 163.597161] audit: type=1130 audit(1788851635.331:792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-4099-172.31.28.172:22-20.61.25.254:57468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 164.629892] audit: type=1101 audit(1788851636.364:793): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 164.638327] audit: type=1103 audit(1788851636.372:794): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 164.645439] audit: type=1006 audit(1788851636.372:795): pid=6051 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 [ 164.649126] audit: type=1300 audit(1788851636.372:795): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fffec7b0620 a2=3 a3=0 items=0 ppid=1 pid=6051 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 164.655655] audit: type=1327 audit(1788851636.372:795): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 164.714450] audit: type=1105 audit(1788851636.447:796): pid=6051 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 164.723160] audit: type=1103 audit(1788851636.457:797): pid=6086 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 166.842401] audit: type=1106 audit(1788851638.576:798): pid=6051 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 166.855361] audit: type=1104 audit(1788851638.576:799): pid=6051 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 172.007058] kauditd_printk_skb: 1 callbacks suppressed [ 172.007062] audit: type=1130 audit(1788851643.741:801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-9-172.31.28.172:22-20.61.25.254:45572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 172.963504] audit: type=1101 audit(1788851644.697:802): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 172.969877] audit: type=1103 audit(1788851644.699:803): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 172.976833] audit: type=1006 audit(1788851644.699:804): pid=6167 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 [ 172.980493] audit: type=1300 audit(1788851644.699:804): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd94870800 a2=3 a3=0 items=0 ppid=1 pid=6167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 172.986388] audit: type=1327 audit(1788851644.699:804): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 173.003028] audit: type=1105 audit(1788851644.737:805): pid=6167 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 173.009877] audit: type=1103 audit(1788851644.741:806): pid=6173 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 174.065528] audit: type=1106 audit(1788851645.799:807): pid=6167 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 174.073975] audit: type=1104 audit(1788851645.799:808): pid=6167 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 179.231585] kauditd_printk_skb: 1 callbacks suppressed [ 179.231590] audit: type=1130 audit(1788851650.965:810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-4100-172.31.28.172:22-20.61.25.254:50520 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 180.225244] audit: type=1101 audit(1788851651.959:811): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 180.232448] audit: type=1103 audit(1788851651.961:812): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 180.238996] audit: type=1006 audit(1788851651.961:813): pid=6242 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 [ 180.242494] audit: type=1300 audit(1788851651.961:813): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd7d306160 a2=3 a3=0 items=0 ppid=1 pid=6242 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 180.249160] audit: type=1327 audit(1788851651.961:813): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 180.254978] audit: type=1105 audit(1788851651.989:814): pid=6242 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 180.261616] audit: type=1103 audit(1788851651.994:815): pid=6246 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 181.165329] audit: type=1106 audit(1788851652.899:816): pid=6242 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 181.172276] audit: type=1104 audit(1788851652.899:817): pid=6242 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 184.444613] kauditd_printk_skb: 20 callbacks suppressed [ 184.444618] audit: type=1106 audit(1788851656.178:834): pid=6273 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 184.453540] audit: type=1104 audit(1788851656.179:835): pid=6273 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 184.459482] audit: type=1131 audit(1788851656.182:836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10-172.31.28.172:22-20.61.25.254:50524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 189.610732] audit: type=1130 audit(1788851661.344:837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-11-172.31.28.172:22-20.61.25.254:58718 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 190.524143] audit: type=1101 audit(1788851662.258:838): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 190.531044] audit: type=1103 audit(1788851662.260:839): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 190.536777] audit: type=1006 audit(1788851662.260:840): pid=6289 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 [ 190.540032] audit: type=1300 audit(1788851662.260:840): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc74c25b10 a2=3 a3=0 items=0 ppid=1 pid=6289 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 190.545937] audit: type=1327 audit(1788851662.260:840): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 190.558156] audit: type=1105 audit(1788851662.292:841): pid=6289 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 190.565604] audit: type=1103 audit(1788851662.299:842): pid=6316 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 191.455905] audit: type=1106 audit(1788851663.190:843): pid=6289 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 191.462787] audit: type=1104 audit(1788851663.190:844): pid=6289 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 194.626721] kauditd_printk_skb: 24 callbacks suppressed [ 194.626725] audit: type=1105 audit(1788851666.361:861): pid=6342 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 194.636372] audit: type=1103 audit(1788851666.370:862): pid=6374 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 196.102952] audit: type=1325 audit(1788851667.836:863): table=filter:154 family=2 entries=8 op=nft_register_rule pid=6388 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 196.108546] audit: type=1300 audit(1788851667.836:863): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffeb399ca50 a2=0 a3=7ffeb399ca3c items=0 ppid=3510 pid=6388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.115835] audit: type=1327 audit(1788851667.836:863): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 196.129324] audit: type=1325 audit(1788851667.863:864): table=nat:155 family=2 entries=26 op=nft_register_rule pid=6388 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" [ 196.134281] audit: type=1300 audit(1788851667.863:864): arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffeb399ca50 a2=0 a3=7ffeb399ca3c items=0 ppid=3510 pid=6388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) [ 196.142530] audit: type=1327 audit(1788851667.863:864): proctitle=69707461626C65732D726573746F7265002D770035002D2D6E6F666C757368002D2D636F756E74657273 [ 196.242550] audit: type=1106 audit(1788851667.976:865): pid=6342 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 196.257725] audit: type=1104 audit(1788851667.984:866): pid=6342 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.065962] kauditd_printk_skb: 19 callbacks suppressed [ 200.065968] audit: type=1101 audit(1788851671.800:880): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.073230] audit: type=1103 audit(1788851671.803:881): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.078593] audit: type=1006 audit(1788851671.803:882): pid=6422 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 [ 200.082086] audit: type=1300 audit(1788851671.803:882): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7fff23b50690 a2=3 a3=0 items=0 ppid=1 pid=6422 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 200.088185] audit: type=1327 audit(1788851671.803:882): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 200.098368] audit: type=1105 audit(1788851671.832:883): pid=6422 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.105347] audit: type=1103 audit(1788851671.835:884): pid=6426 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.776999] audit: type=1106 audit(1788851672.510:885): pid=6422 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.785707] audit: type=1104 audit(1788851672.517:886): pid=6422 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 200.791076] audit: type=1131 audit(1788851672.520:887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-13-172.31.28.172:22-20.61.25.254:41370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 205.928125] kauditd_printk_skb: 6 callbacks suppressed [ 205.928128] audit: type=1130 audit(1788851677.662:890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-4104-172.31.28.172:22-20.61.25.254:39974 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 206.873422] audit: type=1101 audit(1788851678.607:891): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 206.880333] audit: type=1103 audit(1788851678.607:892): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 206.887045] audit: type=1006 audit(1788851678.607:893): pid=6466 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 [ 206.891008] audit: type=1300 audit(1788851678.607:893): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd253dcc80 a2=3 a3=0 items=0 ppid=1 pid=6466 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 206.896319] audit: type=1327 audit(1788851678.607:893): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 206.902692] audit: type=1105 audit(1788851678.636:894): pid=6466 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 206.911779] audit: type=1103 audit(1788851678.646:895): pid=6470 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 207.909678] audit: type=1106 audit(1788851679.642:896): pid=6466 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 207.916328] audit: type=1104 audit(1788851679.643:897): pid=6466 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 213.077051] kauditd_printk_skb: 1 callbacks suppressed [ 213.077056] audit: type=1130 audit(1788851684.810:899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-14-172.31.28.172:22-20.61.25.254:39988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 213.987813] audit: type=1101 audit(1788851685.722:900): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 213.993786] audit: type=1103 audit(1788851685.724:901): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 213.999529] audit: type=1006 audit(1788851685.724:902): pid=6493 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 [ 214.003203] audit: type=1300 audit(1788851685.724:902): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffe3fee9230 a2=3 a3=0 items=0 ppid=1 pid=6493 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 214.008740] audit: type=1327 audit(1788851685.724:902): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 214.022097] audit: type=1105 audit(1788851685.756:903): pid=6493 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 214.029633] audit: type=1103 audit(1788851685.763:904): pid=6497 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 214.681855] audit: type=1106 audit(1788851686.415:905): pid=6493 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 214.688639] audit: type=1104 audit(1788851686.415:906): pid=6493 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 219.846781] kauditd_printk_skb: 1 callbacks suppressed [ 219.846785] audit: type=1130 audit(1788851691.580:908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-15-172.31.28.172:22-20.61.25.254:45092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 220.738642] audit: type=1101 audit(1788851692.472:909): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 220.745915] audit: type=1103 audit(1788851692.475:910): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 220.752295] audit: type=1006 audit(1788851692.475:911): pid=6509 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 [ 220.763028] audit: type=1300 audit(1788851692.475:911): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffd46541a30 a2=3 a3=0 items=0 ppid=1 pid=6509 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 220.769233] audit: type=1327 audit(1788851692.475:911): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 220.781173] audit: type=1105 audit(1788851692.515:912): pid=6509 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 220.788584] audit: type=1103 audit(1788851692.522:913): pid=6536 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 221.988793] audit: type=1106 audit(1788851693.721:914): pid=6509 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 221.995232] audit: type=1104 audit(1788851693.721:915): pid=6509 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 227.154671] kauditd_printk_skb: 1 callbacks suppressed [ 227.154675] audit: type=1130 audit(1788851698.888:917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-16-172.31.28.172:22-20.61.25.254:57564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' [ 228.153096] audit: type=1101 audit(1788851699.887:918): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_time,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 228.159724] audit: type=1103 audit(1788851699.889:919): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 228.165445] audit: type=1006 audit(1788851699.890:920): pid=6579 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 [ 228.168316] audit: type=1300 audit(1788851699.890:920): arch=c000003e syscall=1 success=yes exit=3 a0=8 a1=7ffc2a42dea0 a2=3 a3=0 items=0 ppid=1 pid=6579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd-session" exe="/usr/lib64/misc/sshd-session" subj=system_u:system_r:kernel_t:s0 key=(null) [ 228.174327] audit: type=1327 audit(1788851699.890:920): proctitle=737368642D73657373696F6E3A20636F7265205B706F7374617574685D [ 228.182976] audit: type=1105 audit(1788851699.917:921): pid=6579 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 228.189745] audit: type=1103 audit(1788851699.922:922): pid=6621 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 228.984898] audit: type=1106 audit(1788851700.718:923): pid=6579 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_namespace,pam_keyinit,pam_limits,pam_env,pam_umask,pam_unix,pam_systemd,pam_lastlog,pam_mail acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success' [ 228.992995] audit: type=1104 audit(1788851700.718:924): pid=6579 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/lib64/misc/sshd-session" hostname=20.61.25.254 addr=20.61.25.254 terminal=ssh res=success'