type=CRYPTO_SESSION msg=audit(1771581814.082:83080): pid=323708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=323709 suid=74 rport=57034 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.172.180.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581814.175:83081): pid=323708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=323708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581814.176:83082): pid=323708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.172.180.30 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581816.583:83083): pid=323712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=323712 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581816.584:83084): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=323712 suid=74 rport=57676 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581816.584:83085): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac= pfs=curve25519-sha256 spid=323712 suid=74 rport=57676 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581818.206:83086): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323712 suid=74 rport=57676 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581818.207:83087): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=323712 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1771581818.208:83088): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.148.10.240 addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581818.209:83089): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=323711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581818.209:83090): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.148.10.240 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581820.050:83091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7bd1902a3d6b0fbd8c333b8a0d8fb0cd03128f85bfb72ed019b009d1495077da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581820.053:83092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f8fb2f5d8bad6453e0d369fb0fe26814df7c66717dc1bd19db6cee09d4c60079 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581820.175:83093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7bd1902a3d6b0fbd8c333b8a0d8fb0cd03128f85bfb72ed019b009d1495077da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581820.253:83094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f8fb2f5d8bad6453e0d369fb0fe26814df7c66717dc1bd19db6cee09d4c60079 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=ANOM_PROMISCUOUS msg=audit(1771581828.082:83095): dev=tap579a4ffd-e1 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis" type=SYSCALL msg=audit(1771581828.082:83095): arch=c000003e syscall=46 success=yes exit=60 a0=19 a1=7ffc85cdb1c0 a2=0 a3=0 items=0 ppid=1 pid=22436 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis" type=PROCTITLE msg=audit(1771581828.082:83095): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=NETFILTER_CFG msg=audit(1771581828.253:83096): table=filter:2 family=2 entries=18 op=nft_register_chain pid=323793 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1771581828.253:83096): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe61ce6e90 a2=0 a3=7ffe61ce6e7c items=0 ppid=306887 pid=323793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581828.253:83096): proctitle=69707461626C65732D726573746F7265002D6E type=NETFILTER_CFG msg=audit(1771581828.255:83097): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=323793 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1771581828.255:83097): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffe61ce6e90 a2=0 a3=7ffe61ce6e7c items=0 ppid=306887 pid=323793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581828.255:83097): proctitle=69707461626C65732D726573746F7265002D6E type=NETFILTER_CFG msg=audit(1771581828.264:83098): table=raw:4 family=2 entries=9 op=nft_register_chain pid=323793 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1771581828.264:83098): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe61ce6e90 a2=0 a3=100 items=0 ppid=306887 pid=323793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581828.264:83098): proctitle=69707461626C65732D726573746F7265002D6E type=NETFILTER_CFG msg=audit(1771581828.315:83099): table=filter:5 family=10 entries=18 op=nft_register_chain pid=323795 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto" type=SYSCALL msg=audit(1771581828.315:83099): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe4c836db0 a2=0 a3=7ffe4c836d9c items=0 ppid=306887 pid=323795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581828.315:83099): proctitle=6970367461626C65732D726573746F7265002D6E type=NETFILTER_CFG msg=audit(1771581828.316:83100): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=323795 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto" type=SYSCALL msg=audit(1771581828.316:83100): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffe4c836db0 a2=0 a3=7ffe4c836d9c items=0 ppid=306887 pid=323795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581828.316:83100): proctitle=6970367461626C65732D726573746F7265002D6E type=NETFILTER_CFG msg=audit(1771581828.331:83101): table=raw:7 family=10 entries=9 op=nft_register_chain pid=323795 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto" type=SYSCALL msg=audit(1771581828.331:83101): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe4c836db0 a2=0 a3=100 items=0 ppid=306887 pid=323795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581828.331:83101): proctitle=6970367461626C65732D726573746F7265002D6E type=USER_ACCT msg=audit(1771581828.767:83102): pid=323812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1771581828.767:83103): pid=323812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1771581828.768:83104): pid=323812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1771581828.770:83105): pid=323812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581829.055:83106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67e88b76de81fa03ac4bcb8fe51c8c3a933bf19f33174b03babb9e0afa2e3c2f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581829.059:83107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ee687cf55bcb163c79f18bfdf8642f7bed2b16940ecf1c757247b1534cf50916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581829.218:83108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ee687cf55bcb163c79f18bfdf8642f7bed2b16940ecf1c757247b1534cf50916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1771581829.326:83109): prog-id=2330 op=LOAD type=SYSCALL msg=audit(1771581829.326:83109): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffa901a170 a2=90 a3=9500000001 items=0 ppid=323890 pid=323891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581829.326:83109): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633434396234383531303637646639613465373164623362366338323830 type=SERVICE_STOP msg=audit(1771581829.344:83110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67e88b76de81fa03ac4bcb8fe51c8c3a933bf19f33174b03babb9e0afa2e3c2f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_END msg=audit(1771581829.407:83111): pid=323812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1771581829.408:83112): pid=323812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1771581831.552:83113): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1771581831.552:83114): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1771581831.554:83115): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=323969 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1771581831.617:83116): pid=323969 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1771581831.617:83117): pid=323969 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1771581831.619:83118): pid=323969 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1771581831.623:83119): pid=323969 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581831.626:83120): pid=323969 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1771581831.626:83121): pid=323969 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581831.632:83122): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1771581831.632:83123): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1771581831.638:83124): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1771581831.638:83125): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1771581831.639:83126): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=323987 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1771581831.700:83127): pid=323987 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1771581831.700:83128): pid=323987 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F61383535376565392D623535642D353531392D393432632D6366386636313732663164382F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1771581831.701:83129): pid=323987 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1771581831.704:83130): pid=323987 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581832.391:83131): pid=323987 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1771581832.391:83132): pid=323987 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581832.420:83133): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1771581832.420:83134): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1771581832.620:83135): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1771581832.620:83136): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1771581832.621:83137): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324037 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1771581832.688:83138): pid=324037 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1771581832.689:83139): pid=324037 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1771581832.689:83140): pid=324037 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1771581832.694:83141): pid=324037 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581832.698:83142): pid=324037 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1771581832.698:83143): pid=324037 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581832.702:83144): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1771581832.703:83145): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1771581837.058:83146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8c5682a780a7e30fa685d876c79367b52ebfaee3d0b29d1dcefab4888dbd28e3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581837.226:83147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8c5682a780a7e30fa685d876c79367b52ebfaee3d0b29d1dcefab4888dbd28e3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581844.055:83148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=010f5ab1ce0480bd3e8db137b28d4e02d7b3d2de0979c704d45e2356a2f476cb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581844.229:83149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=010f5ab1ce0480bd3e8db137b28d4e02d7b3d2de0979c704d45e2356a2f476cb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=ANOM_PROMISCUOUS msg=audit(1771581844.551:83150): dev=tap579a4ffd-e1 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis" type=SYSCALL msg=audit(1771581844.551:83150): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7ffc85cdb3d0 a2=0 a3=0 items=0 ppid=1 pid=22436 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis" type=PROCTITLE msg=audit(1771581844.551:83150): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=BPF msg=audit(1771581847.498:83151): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1771581847.792:83152): pid=324199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324199 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581847.982:83153): pid=324198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324199 suid=74 rport=48166 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.189.116.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581847.982:83154): pid=324198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324199 suid=74 rport=48166 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.189.116.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581848.751:83155): pid=324198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324199 suid=74 rport=48166 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=196.189.116.182 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581848.752:83156): pid=324198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324199 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1771581848.753:83157): pid=324198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=196.189.116.182 addr=196.189.116.182 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581848.754:83158): pid=324198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324198 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581848.754:83159): pid=324198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=196.189.116.182 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581849.250:83160): pid=324244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581849.364:83161): pid=324243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324244 suid=74 rport=60410 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=57.128.218.144 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581849.364:83162): pid=324243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324244 suid=74 rport=60410 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=57.128.218.144 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581850.050:83163): pid=324243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324244 suid=74 rport=60410 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=57.128.218.144 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581850.051:83164): pid=324243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324244 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1771581850.051:83165): pid=324243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=57.128.218.144 addr=57.128.218.144 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581850.051:83166): pid=324243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581850.051:83167): pid=324243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=57.128.218.144 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581851.052:83168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7bd1902a3d6b0fbd8c333b8a0d8fb0cd03128f85bfb72ed019b009d1495077da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581851.055:83169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f8fb2f5d8bad6453e0d369fb0fe26814df7c66717dc1bd19db6cee09d4c60079 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581851.245:83170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f8fb2f5d8bad6453e0d369fb0fe26814df7c66717dc1bd19db6cee09d4c60079 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581851.252:83171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7bd1902a3d6b0fbd8c333b8a0d8fb0cd03128f85bfb72ed019b009d1495077da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581858.270:83172): pid=324288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581858.492:83173): pid=324287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324288 suid=74 rport=41798 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.218.64 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581858.493:83174): pid=324287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324288 suid=74 rport=41798 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.218.64 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=ANOM_PROMISCUOUS msg=audit(1771581858.572:83175): dev=tapd32edf6e-af prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis" type=SYSCALL msg=audit(1771581858.572:83175): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7ffc85cdb1c0 a2=0 a3=0 items=0 ppid=1 pid=22436 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis" type=PROCTITLE msg=audit(1771581858.572:83175): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=CRYPTO_KEY_USER msg=audit(1771581858.672:83176): pid=324308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=NETFILTER_CFG msg=audit(1771581858.698:83177): table=filter:2 family=2 entries=18 op=nft_register_chain pid=324310 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1771581858.698:83177): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffec3826cc0 a2=0 a3=7ffec3826cac items=0 ppid=306887 pid=324310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581858.698:83177): proctitle=69707461626C65732D726573746F7265002D6E type=NETFILTER_CFG msg=audit(1771581858.699:83178): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=324310 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1771581858.699:83178): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffec3826cc0 a2=0 a3=7ffec3826cac items=0 ppid=306887 pid=324310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581858.699:83178): proctitle=69707461626C65732D726573746F7265002D6E type=NETFILTER_CFG msg=audit(1771581858.712:83179): table=raw:4 family=2 entries=9 op=nft_register_chain pid=324310 subj=system_u:system_r:spc_t:s0 comm="iptables-restor" type=SYSCALL msg=audit(1771581858.712:83179): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffec3826cc0 a2=0 a3=100 items=0 ppid=306887 pid=324310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581858.712:83179): proctitle=69707461626C65732D726573746F7265002D6E type=NETFILTER_CFG msg=audit(1771581858.750:83180): table=filter:5 family=10 entries=18 op=nft_register_chain pid=324312 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto" type=SYSCALL msg=audit(1771581858.750:83180): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffca92c9630 a2=0 a3=7ffca92c961c items=0 ppid=306887 pid=324312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581858.750:83180): proctitle=6970367461626C65732D726573746F7265002D6E type=NETFILTER_CFG msg=audit(1771581858.750:83181): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=324312 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto" type=SYSCALL msg=audit(1771581858.750:83181): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffca92c9630 a2=0 a3=7ffca92c961c items=0 ppid=306887 pid=324312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581858.750:83181): proctitle=6970367461626C65732D726573746F7265002D6E type=NETFILTER_CFG msg=audit(1771581858.759:83182): table=raw:7 family=10 entries=9 op=nft_register_chain pid=324312 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto" type=SYSCALL msg=audit(1771581858.759:83182): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffca92c9630 a2=0 a3=100 items=0 ppid=306887 pid=324312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581858.759:83182): proctitle=6970367461626C65732D726573746F7265002D6E type=CRYPTO_SESSION msg=audit(1771581858.787:83183): pid=324307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=324308 suid=74 rport=50128 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.172.180.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581858.788:83184): pid=324307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=324308 suid=74 rport=50128 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.172.180.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581858.881:83185): pid=324307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581858.881:83186): pid=324307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.172.180.30 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ACCT msg=audit(1771581859.198:83187): pid=324329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_CMD msg=audit(1771581859.198:83188): pid=324329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset" type=CRED_REFR msg=audit(1771581859.199:83189): pid=324329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_START msg=audit(1771581859.201:83190): pid=324329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581859.673:83191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67e88b76de81fa03ac4bcb8fe51c8c3a933bf19f33174b03babb9e0afa2e3c2f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581859.677:83192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ee687cf55bcb163c79f18bfdf8642f7bed2b16940ecf1c757247b1534cf50916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581859.715:83193): pid=324287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324288 suid=74 rport=41798 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.218.64 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=BPF msg=audit(1771581859.715:83194): prog-id=2331 op=LOAD type=CRYPTO_KEY_USER msg=audit(1771581859.716:83195): pid=324287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324288 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SYSCALL msg=audit(1771581859.715:83194): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff91752560 a2=90 a3=9500000001 items=0 ppid=324375 pid=324378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581859.715:83194): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643534396632303937353966623134633533383938636631363264386334 type=USER_ERR msg=audit(1771581859.717:83196): pid=324287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.166.218.64 addr=188.166.218.64 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581859.718:83197): pid=324287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324287 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581859.718:83198): pid=324287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=188.166.218.64 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_END msg=audit(1771581859.805:83199): pid=324329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRED_DISP msg=audit(1771581859.805:83200): pid=324329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581859.851:83201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ee687cf55bcb163c79f18bfdf8642f7bed2b16940ecf1c757247b1534cf50916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581859.928:83202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67e88b76de81fa03ac4bcb8fe51c8c3a933bf19f33174b03babb9e0afa2e3c2f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581862.808:83203): pid=324496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581862.999:83204): pid=324495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324496 suid=74 rport=38460 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=86.99.116.54 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581862.999:83205): pid=324495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324496 suid=74 rport=38460 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=86.99.116.54 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581864.086:83206): pid=324495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324496 suid=74 rport=38460 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=86.99.116.54 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581864.086:83207): pid=324495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324496 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1771581864.087:83208): pid=324495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=86.99.116.54 addr=86.99.116.54 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581864.087:83209): pid=324495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324495 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581864.087:83210): pid=324495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=86.99.116.54 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581868.045:83211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8c5682a780a7e30fa685d876c79367b52ebfaee3d0b29d1dcefab4888dbd28e3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581868.196:83212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8c5682a780a7e30fa685d876c79367b52ebfaee3d0b29d1dcefab4888dbd28e3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581874.784:83213): pid=324518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581875.009:83214): pid=324517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324518 suid=74 rport=34980 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.93.7.194 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581875.010:83215): pid=324517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324518 suid=74 rport=34980 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.93.7.194 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1771581875.064:83216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=010f5ab1ce0480bd3e8db137b28d4e02d7b3d2de0979c704d45e2356a2f476cb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581875.210:83217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=010f5ab1ce0480bd3e8db137b28d4e02d7b3d2de0979c704d45e2356a2f476cb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581877.514:83218): pid=324517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324518 suid=74 rport=34980 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.93.7.194 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581877.517:83219): pid=324517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324518 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1771581877.518:83220): pid=324517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=182.93.7.194 addr=182.93.7.194 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581877.518:83221): pid=324517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581877.519:83222): pid=324517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=182.93.7.194 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581877.571:83223): pid=324542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581877.816:83224): pid=324541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324542 suid=74 rport=36958 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.191.14.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581877.816:83225): pid=324541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324542 suid=74 rport=36958 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.191.14.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581879.147:83226): pid=324541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324542 suid=74 rport=36958 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.191.14.210 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581879.148:83227): pid=324541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324542 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1771581879.149:83228): pid=324541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.191.14.210 addr=103.191.14.210 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581879.150:83229): pid=324541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581879.150:83230): pid=324541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.191.14.210 terminal=ssh res=failed'UID="root" AUID="unset" type=ANOM_PROMISCUOUS msg=audit(1771581880.689:83231): dev=tapd32edf6e-af prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis" type=SYSCALL msg=audit(1771581880.689:83231): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7ffc85cdb3d0 a2=0 a3=0 items=0 ppid=1 pid=22436 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis" type=PROCTITLE msg=audit(1771581880.689:83231): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D type=SERVICE_START msg=audit(1771581882.054:83232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7bd1902a3d6b0fbd8c333b8a0d8fb0cd03128f85bfb72ed019b009d1495077da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581882.057:83233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f8fb2f5d8bad6453e0d369fb0fe26814df7c66717dc1bd19db6cee09d4c60079 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581882.176:83234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7bd1902a3d6b0fbd8c333b8a0d8fb0cd03128f85bfb72ed019b009d1495077da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581882.274:83235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f8fb2f5d8bad6453e0d369fb0fe26814df7c66717dc1bd19db6cee09d4c60079 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=BPF msg=audit(1771581883.280:83236): prog-id=0 op=UNLOAD type=CRYPTO_KEY_USER msg=audit(1771581889.631:83237): pid=324686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581889.724:83238): pid=324685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324686 suid=74 rport=60238 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=154.91.170.41 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581889.724:83239): pid=324685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324686 suid=74 rport=60238 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=154.91.170.41 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=SERVICE_START msg=audit(1771581890.052:83240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67e88b76de81fa03ac4bcb8fe51c8c3a933bf19f33174b03babb9e0afa2e3c2f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581890.056:83241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ee687cf55bcb163c79f18bfdf8642f7bed2b16940ecf1c757247b1534cf50916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581890.204:83242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ee687cf55bcb163c79f18bfdf8642f7bed2b16940ecf1c757247b1534cf50916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581890.301:83243): pid=324685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324686 suid=74 rport=60238 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=154.91.170.41 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581890.301:83244): pid=324685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324686 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1771581890.302:83245): pid=324685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=154.91.170.41 addr=154.91.170.41 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581890.302:83246): pid=324685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581890.303:83247): pid=324685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.91.170.41 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581890.352:83248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67e88b76de81fa03ac4bcb8fe51c8c3a933bf19f33174b03babb9e0afa2e3c2f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=USER_LOGIN msg=audit(1771581892.718:83249): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1771581892.718:83250): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1771581892.721:83251): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324725 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1771581892.796:83252): pid=324725 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1771581892.796:83253): pid=324725 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1771581892.798:83254): pid=324725 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1771581892.804:83255): pid=324725 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581892.806:83256): pid=324725 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1771581892.806:83257): pid=324725 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581892.814:83258): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1771581892.814:83259): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1771581892.822:83260): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1771581892.822:83261): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1771581892.823:83262): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324743 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1771581892.885:83263): pid=324743 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1771581892.885:83264): pid=324743 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F61383535376565392D623535642D353531392D393432632D6366386636313732663164382F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1771581892.886:83265): pid=324743 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1771581892.890:83266): pid=324743 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581893.334:83267): pid=324743 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1771581893.334:83268): pid=324743 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581893.340:83269): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1771581893.340:83270): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1771581893.416:83271): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1771581893.417:83272): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1771581893.418:83273): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324782 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1771581893.496:83274): pid=324782 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1771581893.496:83275): pid=324782 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1771581893.497:83276): pid=324782 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1771581893.500:83277): pid=324782 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581893.503:83278): pid=324782 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1771581893.504:83279): pid=324782 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581893.510:83280): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1771581893.510:83281): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1771581893.513:83282): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1771581893.513:83283): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1771581893.515:83284): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324800 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1771581893.584:83285): pid=324800 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1771581893.585:83286): pid=324800 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F61383535376565392D623535642D353531392D393432632D6366386636313732663164382F6365706861646D2E64343332396666306235383338396131633837343432376536666138636461646332353435303739313137633737343464643965646634613365346663383366202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1771581893.586:83287): pid=324800 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1771581893.589:83288): pid=324800 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581894.254:83289): pid=324800 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1771581894.255:83290): pid=324800 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581894.396:83291): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1771581894.396:83292): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGIN msg=audit(1771581894.675:83293): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_START msg=audit(1771581894.675:83294): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=CRYPTO_KEY_USER msg=audit(1771581894.677:83295): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324850 suid=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin" type=USER_ACCT msg=audit(1771581894.745:83296): pid=324850 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_CMD msg=audit(1771581894.746:83297): pid=324850 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_REFR msg=audit(1771581894.747:83298): pid=324850 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_START msg=audit(1771581894.751:83299): pid=324850 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581894.755:83300): pid=324850 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=CRED_DISP msg=audit(1771581894.755:83301): pid=324850 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin" type=USER_END msg=audit(1771581894.760:83302): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=USER_LOGOUT msg=audit(1771581894.760:83303): pid=305012 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin" type=SERVICE_START msg=audit(1771581899.049:83304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8c5682a780a7e30fa685d876c79367b52ebfaee3d0b29d1dcefab4888dbd28e3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581899.167:83305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8c5682a780a7e30fa685d876c79367b52ebfaee3d0b29d1dcefab4888dbd28e3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581903.145:83306): pid=324889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581903.344:83307): pid=324888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324889 suid=74 rport=50226 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=203.228.30.198 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581903.344:83308): pid=324888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=324889 suid=74 rport=50226 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=203.228.30.198 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581904.448:83309): pid=324888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324889 suid=74 rport=50226 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=203.228.30.198 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581904.448:83310): pid=324888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324889 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_ERR msg=audit(1771581904.449:83311): pid=324888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=203.228.30.198 addr=203.228.30.198 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581904.450:83312): pid=324888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581904.450:83313): pid=324888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=203.228.30.198 terminal=ssh res=failed'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581904.982:83314): pid=324891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581904.983:83315): pid=324890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=324891 suid=74 rport=43008 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.172.180.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581904.983:83316): pid=324890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256-etm@openssh.com pfs=curve25519-sha256@libssh.org spid=324891 suid=74 rport=43008 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.172.180.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_KEY_USER msg=audit(1771581905.236:83317): pid=324890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=324890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=USER_LOGIN msg=audit(1771581905.236:83318): pid=324890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.172.180.30 terminal=ssh res=failed'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581905.271:83319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=010f5ab1ce0480bd3e8db137b28d4e02d7b3d2de0979c704d45e2356a2f476cb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581905.417:83320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=010f5ab1ce0480bd3e8db137b28d4e02d7b3d2de0979c704d45e2356a2f476cb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581913.065:83321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7bd1902a3d6b0fbd8c333b8a0d8fb0cd03128f85bfb72ed019b009d1495077da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581913.069:83322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f8fb2f5d8bad6453e0d369fb0fe26814df7c66717dc1bd19db6cee09d4c60079 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581913.221:83323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7bd1902a3d6b0fbd8c333b8a0d8fb0cd03128f85bfb72ed019b009d1495077da comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581913.246:83324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f8fb2f5d8bad6453e0d369fb0fe26814df7c66717dc1bd19db6cee09d4c60079 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581913.787:83325): pid=325006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=325006 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581913.788:83326): pid=325005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=325006 suid=74 rport=43892 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581913.788:83327): pid=325005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=325006 suid=74 rport=43892 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1771581913.856:83328): pid=325005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1771581913.873:83329): pid=325005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581913.873:83330): pid=325005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:b9:ac:42:7d:db:01:f5:d2:f2:2f:8c:e7:8e:c2:c2:3c:34:d3:e8:ef:ba:c5:9c:e3:1d:18:dc:cc:91:4e:03:a9 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1771581913.904:83331): pid=325005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581913.904:83332): pid=325005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325006 suid=74 rport=43892 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1771581913.907:83333): pid=325005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1771581913.907:83334): pid=325005 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=74 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1771581913.907:83334): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff6c451c80 a2=4 a3=3e8 items=0 ppid=186832 pid=325005 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=74 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581913.907:83334): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1771581913.910:83335): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1771581913.950:83336): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1771581913.952:83337): pid=325008 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=325008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1771581913.953:83338): pid=325008 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1771581913.998:83339): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1771581913.998:83340): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1771581914.002:83341): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=325009 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1771581914.074:83342): pid=325025 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1771581914.075:83343): pid=325025 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E667077687A6866686969686A6F6B7068776B6E766E6778786B65656D6B62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1771581914.076:83344): pid=325025 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1771581914.081:83345): pid=325025 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1771581914.931:83346): pid=325025 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_DISP msg=audit(1771581914.931:83347): pid=325025 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_END msg=audit(1771581914.935:83348): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_LOGOUT msg=audit(1771581914.935:83349): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1771581918.990:83350): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325008 suid=1000 rport=43892 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=CRYPTO_KEY_USER msg=audit(1771581918.990:83351): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=325008 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_END msg=audit(1771581918.992:83352): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRED_DISP msg=audit(1771581918.992:83353): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1771581918.993:83354): pid=325005 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=325005 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=SERVICE_START msg=audit(1771581921.054:83355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67e88b76de81fa03ac4bcb8fe51c8c3a933bf19f33174b03babb9e0afa2e3c2f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581921.058:83356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ee687cf55bcb163c79f18bfdf8642f7bed2b16940ecf1c757247b1534cf50916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581921.201:83357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ee687cf55bcb163c79f18bfdf8642f7bed2b16940ecf1c757247b1534cf50916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581921.282:83358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67e88b76de81fa03ac4bcb8fe51c8c3a933bf19f33174b03babb9e0afa2e3c2f comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581930.050:83359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8c5682a780a7e30fa685d876c79367b52ebfaee3d0b29d1dcefab4888dbd28e3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581930.177:83360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8c5682a780a7e30fa685d876c79367b52ebfaee3d0b29d1dcefab4888dbd28e3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_START msg=audit(1771581936.052:83361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=010f5ab1ce0480bd3e8db137b28d4e02d7b3d2de0979c704d45e2356a2f476cb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=SERVICE_STOP msg=audit(1771581936.177:83362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=010f5ab1ce0480bd3e8db137b28d4e02d7b3d2de0979c704d45e2356a2f476cb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581937.827:83363): pid=325118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=325118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root" type=CRYPTO_SESSION msg=audit(1771581937.828:83364): pid=325117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=325118 suid=74 rport=34026 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRYPTO_SESSION msg=audit(1771581937.828:83365): pid=325117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac= pfs=curve25519-sha256 spid=325118 suid=74 rport=34026 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=USER_AUTH msg=audit(1771581937.892:83366): pid=325117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_AUTH msg=audit(1771581937.903:83367): pid=325117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581937.903:83368): pid=325117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:b9:ac:42:7d:db:01:f5:d2:f2:2f:8c:e7:8e:c2:c2:3c:34:d3:e8:ef:ba:c5:9c:e3:1d:18:dc:cc:91:4e:03:a9 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" type=USER_ACCT msg=audit(1771581937.933:83369): pid=325117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=CRYPTO_KEY_USER msg=audit(1771581937.933:83370): pid=325117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325118 suid=74 rport=34026 laddr=38.102.83.80 lport=22 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd" type=CRED_ACQ msg=audit(1771581937.936:83371): pid=325117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset" type=LOGIN msg=audit(1771581937.937:83372): pid=325117 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=75 res=1UID="root" OLD-AUID="unset" AUID="zuul" type=SYSCALL msg=audit(1771581937.937:83372): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffffc9c0c40 a2=4 a3=3e8 items=0 ppid=186832 pid=325117 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=75 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root" type=PROCTITLE msg=audit(1771581937.937:83372): proctitle=737368643A207A75756C205B707269765D type=USER_ROLE_CHANGE msg=audit(1771581937.938:83373): pid=325117 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_START msg=audit(1771581937.969:83374): pid=325117 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=CRYPTO_KEY_USER msg=audit(1771581937.970:83375): pid=325120 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=325120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root" type=CRED_ACQ msg=audit(1771581937.972:83376): pid=325120 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" type=USER_LOGIN msg=audit(1771581938.015:83377): pid=325117 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=USER_START msg=audit(1771581938.016:83378): pid=325117 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul" type=CRYPTO_KEY_USER msg=audit(1771581938.018:83379): pid=325117 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:fe:4b:2e:06:94:4c:70:8a:33:5f:05:84:cf:d3:6f:b7:d1:ea:8c:aa:c8:28:19:82:01:ab:97:0f:c4:74:a7:4e direction=? spid=325121 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul" type=USER_ACCT msg=audit(1771581938.090:83380): pid=325121 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_CMD msg=audit(1771581938.091:83381): pid=325121 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul" type=CRED_REFR msg=audit(1771581938.092:83382): pid=325121 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul" type=USER_START msg=audit(1771581938.097:83383): pid=325121 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"