type=USER_ERR msg=audit(1765016851.144:83070): pid=336912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.140.17.124 addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016851.145:83071): pid=336912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=336912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016851.145:83072): pid=336912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.140.17.124 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016853.832:83073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016853.983:83074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016866.835:83075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016866.839:83076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016866.958:83077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016867.078:83078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016873.840:83079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016873.843:83080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016874.043:83081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016874.131:83082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016877.828:83083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016877.952:83084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016880.833:83085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016880.950:83086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016884.825:83087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016884.971:83088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016891.547:83089): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016891.548:83090): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016891.549:83091): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337154 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016891.600:83092): pid=337154 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016891.600:83093): pid=337154 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016891.602:83094): pid=337154 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016891.606:83095): pid=337154 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016891.608:83096): pid=337154 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016891.608:83097): pid=337154 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016891.612:83098): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016891.612:83099): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016891.615:83100): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016891.615:83101): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016891.616:83102): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337172 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016891.676:83103): pid=337172 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016891.676:83104): pid=337172 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016891.677:83105): pid=337172 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016891.679:83106): pid=337172 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016892.341:83107): pid=337172 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016892.342:83108): pid=337172 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016892.450:83109): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016892.450:83110): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016892.618:83111): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016892.618:83112): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016892.620:83113): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337221 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016892.672:83114): pid=337221 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016892.672:83115): pid=337221 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016892.673:83116): pid=337221 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016892.676:83117): pid=337221 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016892.679:83118): pid=337221 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016892.680:83119): pid=337221 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016892.684:83120): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016892.684:83121): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016894.103:83122): pid=337240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337240 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016894.307:83123): pid=337239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337240 suid=74 rport=43120 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016894.308:83124): pid=337239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337240 suid=74 rport=43120 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016895.433:83125): pid=337239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=337240 suid=74 rport=43120 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016895.433:83126): pid=337239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337240 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016895.435:83127): pid=337239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=118.219.234.233 addr=118.219.234.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016895.435:83128): pid=337239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016895.435:83129): pid=337239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016896.986:83130): pid=337153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1765016897.656:83131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016897.660:83132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016897.825:83133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016897.916:83134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016903.320:83135): pid=337283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337283 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016903.543:83136): pid=337282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337283 suid=74 rport=49728 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016903.543:83137): pid=337282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337283 suid=74 rport=49728 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016904.766:83138): pid=337282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=337283 suid=74 rport=49728 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016904.766:83139): pid=337282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337283 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016904.767:83140): pid=337282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=14.194.101.210 addr=14.194.101.210 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016904.768:83141): pid=337282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337282 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016904.768:83142): pid=337282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016904.788:83143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016904.791:83144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016904.964:83145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016905.019:83146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016908.832:83147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016908.952:83148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016911.839:83149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016911.956:83150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016915.826:83151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016916.010:83152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016928.826:83153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016928.830:83154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016928.995:83155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016929.028:83156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016935.829:83157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016935.833:83158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016935.936:83159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016936.005:83160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016939.822:83161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016939.938:83162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016942.828:83163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016942.949:83164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016946.855:83165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016946.999:83166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016952.783:83167): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016952.783:83168): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016952.785:83169): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337662 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016952.851:83170): pid=337662 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016952.852:83171): pid=337662 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016952.853:83172): pid=337662 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016952.858:83173): pid=337662 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016952.860:83174): pid=337662 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016952.861:83175): pid=337662 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016952.865:83176): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016952.866:83177): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016952.877:83178): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016952.877:83179): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016952.878:83180): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337680 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016952.939:83181): pid=337680 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016952.940:83182): pid=337680 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016952.941:83183): pid=337680 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016952.944:83184): pid=337680 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016953.603:83185): pid=337680 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016953.604:83186): pid=337680 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016953.678:83187): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016953.678:83188): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016953.896:83189): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016953.896:83190): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016953.898:83191): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337729 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016953.962:83192): pid=337729 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016953.963:83193): pid=337729 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016953.963:83194): pid=337729 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016953.966:83195): pid=337729 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016953.970:83196): pid=337729 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016953.970:83197): pid=337729 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016953.975:83198): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016953.975:83199): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765016959.837:83200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016959.842:83201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016959.976:83202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016960.078:83203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016962.895:83204): pid=337790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016963.125:83205): pid=337789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337790 suid=74 rport=50836 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.49.180 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016963.125:83206): pid=337789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337790 suid=74 rport=50836 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.49.180 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016964.382:83207): pid=337789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=337790 suid=74 rport=50836 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.49.180 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016964.382:83208): pid=337789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337790 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016964.383:83209): pid=337789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.49.180 addr=101.47.49.180 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016964.384:83210): pid=337789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016964.384:83211): pid=337789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.49.180 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016966.839:83212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016966.842:83213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016967.040:83214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016967.095:83215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016970.827:83216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016970.977:83217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016973.827:83218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016973.952:83219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016977.831:83220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016977.979:83221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016990.834:83222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016990.837:83223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016990.942:83224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016991.031:83225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016993.166:83226): pid=337985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016993.373:83227): pid=337984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337985 suid=74 rport=44884 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016993.373:83228): pid=337984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337985 suid=74 rport=44884 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016994.514:83229): pid=337984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=337985 suid=74 rport=44884 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016994.514:83230): pid=337984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337985 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016994.514:83231): pid=337984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=118.219.234.233 addr=118.219.234.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016994.515:83232): pid=337984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016994.515:83233): pid=337984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016996.815:83234): pid=337987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016997.039:83235): pid=337986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337987 suid=74 rport=49788 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016997.040:83236): pid=337986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337987 suid=74 rport=49788 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765016997.838:83237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016997.843:83238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016998.002:83239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016998.052:83240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016998.263:83241): pid=337986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=337987 suid=74 rport=49788 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016998.263:83242): pid=337986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337987 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016998.264:83243): pid=337986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=14.194.101.210 addr=14.194.101.210 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016998.266:83244): pid=337986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=337986 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016998.266:83245): pid=337986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017001.978:83246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017002.090:83247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017004.827:83248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017004.946:83249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017008.827:83250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017008.944:83251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765017014.073:83252): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017014.073:83253): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017014.075:83254): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=338094 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017014.141:83255): pid=338094 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017014.141:83256): pid=338094 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017014.142:83257): pid=338094 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017014.147:83258): pid=338094 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017014.150:83259): pid=338094 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017014.150:83260): pid=338094 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017014.155:83261): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017014.155:83262): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765017014.166:83263): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017014.166:83264): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017014.168:83265): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=338112 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017014.232:83266): pid=338112 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017014.233:83267): pid=338112 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017014.233:83268): pid=338112 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017014.237:83269): pid=338112 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017014.901:83270): pid=338112 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017014.902:83271): pid=338112 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017015.019:83272): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017015.019:83273): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765017015.142:83274): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017015.142:83275): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017015.144:83276): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=338161 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017015.205:83277): pid=338161 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017015.205:83278): pid=338161 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017015.206:83279): pid=338161 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017015.209:83280): pid=338161 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017015.213:83281): pid=338161 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017015.213:83282): pid=338161 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017015.217:83283): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017015.218:83284): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765017021.830:83285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017021.834:83286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017021.957:83287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017022.051:83288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017028.831:83289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017028.835:83290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017028.950:83291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017029.060:83292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765017031.994:83293): dev=tap1edce767-a0 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765017031.994:83293): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fffa56b4a40 a2=0 a3=0 items=0 ppid=1 pid=22274 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765017031.994:83293): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765017032.130:83294): table=filter:2 family=2 entries=18 op=nft_register_chain pid=338334 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765017032.130:83294): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fffc3908990 a2=0 a3=7fffc390897c items=0 ppid=263746 pid=338334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017032.130:83294): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765017032.131:83295): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=338334 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765017032.131:83295): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7fffc3908990 a2=0 a3=7fffc390897c items=0 ppid=263746 pid=338334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017032.131:83295): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765017032.146:83296): table=raw:4 family=2 entries=9 op=nft_register_chain pid=338334 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765017032.146:83296): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fffc3908990 a2=0 a3=100 items=0 ppid=263746 pid=338334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017032.146:83296): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765017032.189:83297): table=filter:5 family=10 entries=18 op=nft_register_chain pid=338337 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765017032.189:83297): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffeeeaae360 a2=0 a3=7ffeeeaae34c items=0 ppid=263746 pid=338337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017032.189:83297): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765017032.189:83298): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=338337 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765017032.189:83298): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffeeeaae360 a2=0 a3=7ffeeeaae34c items=0 ppid=263746 pid=338337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017032.189:83298): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765017032.202:83299): table=raw:7 family=10 entries=9 op=nft_register_chain pid=338337 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765017032.202:83299): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffeeeaae360 a2=0 a3=100 items=0 ppid=263746 pid=338337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017032.202:83299): proctitle=6970367461626C65732D726573746F7265002D6E
type=SERVICE_START msg=audit(1765017032.495:83300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017032.600:83301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765017032.614:83302): pid=338407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765017032.614:83303): pid=338407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765017032.614:83304): pid=338407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765017032.615:83305): pid=338407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765017033.054:83306): prog-id=2442 op=LOAD
type=SYSCALL msg=audit(1765017033.054:83306): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc7f50f030 a2=90 a3=9500000001 items=0 ppid=338448 pid=338449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017033.054:83306): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643638613361616335616439323830633333653738306663353031343163
type=USER_END msg=audit(1765017033.135:83307): pid=338407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765017033.135:83308): pid=338407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017035.292:83309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017035.425:83310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017039.826:83311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017040.027:83312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017048.413:83313): pid=338622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=338622 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765017048.521:83314): pid=338621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=338622 suid=74 rport=32158 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765017048.521:83315): pid=338621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=338622 suid=74 rport=32158 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765017049.155:83316): pid=338621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=338622 suid=74 rport=32158 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765017049.156:83317): pid=338621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=338622 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765017049.157:83318): pid=338621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017049.157:83319): pid=338621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=338621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765017049.158:83320): pid=338621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017052.825:83321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017052.827:83322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017052.932:83323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017053.019:83324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765017055.867:83325): dev=tap1edce767-a0 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765017055.867:83325): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fffa56b4c50 a2=0 a3=0 items=0 ppid=1 pid=22274 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765017055.867:83325): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765017059.481:83326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017059.484:83327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765017059.485:83328): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765017059.587:83329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017059.765:83330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017062.825:83331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017062.943:83332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017065.828:83333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017065.948:83334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017070.828:83335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017070.997:83336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765017075.314:83337): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017075.314:83338): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017075.317:83339): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=338946 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017075.387:83340): pid=338946 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017075.388:83341): pid=338946 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017075.390:83342): pid=338946 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017075.396:83343): pid=338946 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017075.399:83344): pid=338946 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017075.399:83345): pid=338946 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017075.404:83346): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017075.404:83347): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765017075.416:83348): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017075.416:83349): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017075.417:83350): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=338964 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017075.477:83351): pid=338964 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017075.477:83352): pid=338964 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017075.478:83353): pid=338964 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017075.480:83354): pid=338964 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017076.128:83355): pid=338964 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017076.128:83356): pid=338964 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017076.168:83357): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017076.168:83358): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765017076.343:83359): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017076.343:83360): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017076.345:83361): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339013 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017076.400:83362): pid=339013 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017076.401:83363): pid=339013 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017076.402:83364): pid=339013 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017076.406:83365): pid=339013 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017076.410:83366): pid=339013 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017076.410:83367): pid=339013 uid=1002 auid=1002 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017076.414:83368): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017076.414:83369): pid=308593 uid=0 auid=1002 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765017083.831:83370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017083.836:83371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017084.023:83372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5a95a31a3d61d2f948a3383baa17e8fe9e0336cbbe8cd1193992f8830dfe5999 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017084.132:83373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b72b7f6308415cf6475230cb9b0cbf85f87f74051929730ede4e25c3d87f5941 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017089.827:83374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017089.829:83375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017089.939:83376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=bb7a9bcbc6b5241be8139843cc74262124ff60e2712fcc5adc78da15e3143094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017089.994:83377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=10ccb8cb18db7849aa21674e6bb5b9d3988304a3a1061b356419125284408a6e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017093.419:83378): pid=339112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339112 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765017093.420:83379): pid=339111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=339112 suid=74 rport=43768 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765017093.420:83380): pid=339111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=339112 suid=74 rport=43768 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765017093.486:83381): pid=339111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765017093.500:83382): pid=339111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017093.500:83383): pid=339111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017093.503:83384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765017093.530:83385): pid=339111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017093.531:83386): pid=339111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=339112 suid=74 rport=43768 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765017093.533:83387): pid=339111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765017093.533:83388): pid=339111 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=79 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765017093.533:83388): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcc907fe00 a2=4 a3=3e8 items=0 ppid=184255 pid=339111 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=79 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017093.533:83388): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765017093.535:83389): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765017093.579:83390): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017093.582:83391): pid=339127 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765017093.583:83392): pid=339127 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765017093.626:83393): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765017093.626:83394): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017093.630:83395): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339135 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765017093.635:83396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=44e8baf5fd6841d0aefb15fe2359de24b840fa2fbe07d09ba5f718006ae6ace6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765017093.696:83397): pid=339151 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765017093.696:83398): pid=339151 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64726171666C72657170677A6A676F7772787172697077657A6B646E6768776D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765017093.699:83399): pid=339151 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765017093.704:83400): pid=339151 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765017094.254:83401): pid=339151 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765017094.254:83402): pid=339151 uid=1000 auid=1000 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765017094.257:83403): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765017094.257:83404): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017094.497:83405): pid=339157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339157 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765017094.777:83406): pid=339156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=339157 suid=74 rport=45080 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765017094.777:83407): pid=339156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=339157 suid=74 rport=45080 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765017094.835:83408): pid=339159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765017095.039:83409): pid=339158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=339159 suid=74 rport=46656 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765017095.039:83410): pid=339158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=339159 suid=74 rport=46656 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765017096.161:83411): pid=339158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=339159 suid=74 rport=46656 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765017096.161:83412): pid=339158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339159 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765017096.162:83413): pid=339158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=118.219.234.233 addr=118.219.234.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017096.163:83414): pid=339158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339158 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765017096.163:83415): pid=339158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=118.219.234.233 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017096.183:83416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017096.298:83417): pid=339156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=339157 suid=74 rport=45080 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765017096.299:83418): pid=339156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339157 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765017096.300:83419): pid=339156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=14.194.101.210 addr=14.194.101.210 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017096.300:83420): pid=339156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339156 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765017096.300:83421): pid=339156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=14.194.101.210 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017096.311:83422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d25404de82bf33c2d8ac6199349771ccea807f639a7289be7b7e445bb6613538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017099.598:83423): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=339127 suid=1000 rport=43768 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017099.598:83424): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339127 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765017099.601:83425): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765017099.602:83426): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017099.603:83427): pid=339111 uid=0 auid=1000 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1765017101.825:83428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017101.977:83429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ecfa85b1bac9a037a1ec468c5f8efd50bfc5b1966b6d96b971519ffca6a66f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017112.401:83430): pid=339254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765017112.403:83431): pid=339253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=339254 suid=74 rport=48858 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765017112.403:83432): pid=339253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=339254 suid=74 rport=48858 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765017112.468:83433): pid=339253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765017112.482:83434): pid=339253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017112.482:83435): pid=339253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765017112.511:83436): pid=339253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017112.512:83437): pid=339253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=339254 suid=74 rport=48858 laddr=38.102.83.150 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765017112.514:83438): pid=339253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765017112.514:83439): pid=339253 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=80 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765017112.514:83439): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcb34a3010 a2=4 a3=3e8 items=0 ppid=184255 pid=339253 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017112.514:83439): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765017112.516:83440): pid=339253 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765017112.556:83441): pid=339253 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017112.558:83442): pid=339256 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339256 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765017112.559:83443): pid=339256 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765017112.602:83444): pid=339253 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765017112.602:83445): pid=339253 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017112.605:83446): pid=339253 uid=0 auid=1000 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:aa:d3:26:e1:86:ed:ed:a7:eb:6e:64:13:a5:d4:3b:77:78:68:9e:09:22:37:c3:b9:63:b9:ac:c2:b8:ce:5c:1c direction=? spid=339257 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765017112.671:83447): pid=339257 uid=1000 auid=1000 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765017112.671:83448): pid=339257 uid=1000 auid=1000 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765017112.673:83449): pid=339257 uid=1000 auid=1000 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765017112.678:83450): pid=339257 uid=1000 auid=1000 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"